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STUDY SHOWS DEVELOPMENT 
MANAGERS BULLISH ON LINUX 

Operating system at home in Web f app servers 

open-source operating system. 
That's according to a new study 
by BZ Research, a subsidiary 
of BZ Media LLC (www 
.bzmedia.com), publisher of 
SD Times. 

The study showed that 23 

percent of development man- 

► continued on page 14 



BY ALAN ZEICHICK 

Nearly a quarter of develop- 
ment managers consider them- 
selves committed to using Lin- 
ux at their workplace, and 
roughly another third call 
themselves pro-Linux. Howev- 
er, their companies are some- 
what less enthusiastic about the 
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Novell to SCO: 
Put Up or Shut 
Up About Unix 

Joins German company to demand 
proof of property rights, code theft 



BY YVONNE L. LEE 

Like aftershocks following an 
earthquake, the effects of the 
SCO Group's assault on Linux 
continued to ripple through 
the industry late last month, 
as company after company 
staked out positions to cover 
their assets. 

Microsoft Corp. paid licens- 
ing fees for Unix; the Open 
Group emphasized 
that it, not SCO, 
owns the trademark 
to the Unix name; 
Lindows.com re- 
vealed that it had an 
agreement protect- 
ing it from a lawsuit; 
SuSE Inc. said it 
would continue to 
support UnitedLin- 
ux; and Novell Inc. 

and German com- SCO needs to substanti- 
pany LinuxTag both ate its claims, says 
called upon SCO to Novell's Messman. 




prove its claims more fully. 

The spate of activity follows 
SCO's April lawsuit against IBM 
Corp. alleging that Armonk took 
code it licensed from AT&T, 
the former owner of the Unix 
technology, and placed it in Lin- 
ux. SCO (www.sco.com) said it 
has found specific lines of code 
that appear identically in both 
IBM's version of Unix and in 
Linux. In addition, 
the company in early 
May sent letters to 
the 1,500 largest 
companies notifying 
them that they may 
be in violation of 
SCO's rights. 

"I don't think 
people are really 
scared yet. They're 
waiting to see what 
happens with the 
IBM suit," said Bill 
► continued on page 16 



TeamShare Acquisition 
Moves Serena Into Process 

Strategy behind $18 million purchase 
is to 'manage change where it occurs' 



BY DAVID RUBINSTEIN 

Looking to extend its enterprise 
change management vision 
beyond application develop- 
ment, Serena Software Inc. late 
last month acquired TeamShare 
Inc. for US$18 million in cash. 
Serena, whose ChangeMan 
family of tools addresses main- 
frame and distributed systems 
issues, plans on making Team- 
Share's TeamTrack defect- 
tracking tool a central part of 
its offering, broadening its 



reach into managing business 
process as well, according to 
Chuck Henderson, director of 
product marketing. "The over- 
all strategy is to manage 
change across all the places it 
is occurring, while supporting 
multiple platforms and tools," 
Henderson said. "TeamShare 
takes us into the process man- 
agement side." 

Serena's view is supported 
by Gartner Inc. analyst Jim 
Duggan, who said enterprises 
are placing more emphasis on 
process and administration for 
getting software into produc- 
tion. "The question is, what 
happens when development is 
done and the production shop 
gets [the application]," Duggan 
said. "Companies that put busi- 
ness-critical applications on dis- 



tributed platforms are trying to 
meet the same quality-of-ser- 
vice standards as mainframe 
'glass houses' did." 

Duggan said the high-end 
change management tools that 
also encompass process take 
about 10 percent of the SCM 
market now, and he expects 
that to climb to 20 percent in 
the next five years. With this 
acquisition, he said, Serena is 
better placed to compete 
against such companies as 
Computer Associates, Kintana 
and Merant, and he added that 
MKS is headed in the same 
direction with its Integrity 
Manager tool. 

"If Serena can get people to 
look at them on a functional 
basis, for the same price of 
[IBM's Rational] ClearCase and 
ClearQuest, they're delivering a 
whole other slice of functionali- 
ty," Duggan said. "The problem 
is, people look at Rational and 
say, This is the Cadillac — it 
must have the most features.' 
That shows what a great job of 
marketing Rational has done 
► continued on page 17 



SUN MOVES 
TO OPEN UP r 
STREAMLINE 
JAVA PROCESS 

BY YVONNE L. LEE 

Sun Microsystems Inc. has pro- 
posed changes to the Java Com- 
munity Process that would 
streamline the process while 
also making it more open and 
vendor-neutral. 

Under the proposed revi- 
sions, called JCP 2.6, a period 
in the review process that had 
been for member-only review 
would now be opened up for 
public review. Further, the 
executive committee balloting 
that happened in the middle of 
the process would now happen 
at its conclusion. JCP 2.6 is 
itself going through the com- 
munity review process as Java 
Specification Request 215, 
► continued on page 12 
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Microsoft: Windows Server 2003 Ready for NT Users 

Claims architectural improvements enough to entice older customers to migrate 



BY YVONNE L. LEE 

Microsoft Corp. is making a 
concerted effort to get its 
installed network server base — 
as much as one-third of which 
still could be running the 7- 
year-old Windows NT 4 net- 
work operating system — to use 
Windows Server 2003. 

When the company launched 
Server 2003 in late April, it tout- 
ed the benefits of the new serv- 
er operating system compared 
with Windows NT Server, rather 
than the more recent Windows 
2000 Server. 

At the Windows Server 2003 
launch, Microsoft put its mar- 
keting machinery into high gear, 
aiming squarely at NT users. 
CEO Steve Ballmer emphasized 
reasons to upgrade from Win- 
dows NT to Windows Server 
2003, but not why to upgrade 
from Windows 2000 Server to 
Windows Server 2003. In addi- 
tion, the company's Web site 
lists "Top 10 Features of Win- 
dows Server 2003 for Organiza- 
tions Upgrading from Windows 
NT Server 4.0," as well as a 
white paper about why to 
upgrade from Windows NT to 
Windows Server 2003, but no 
such information for Windows 
2000 Server users. 

One reason Microsoft chose 
to focus on Windows NT users is 
that upgrading this operating sys- 
tem requires a total overhaul of 



the network, whereas Windows 
2000 Server and Windows Server 
2003 networks can coexist, said 
Bob O'Brien, a group product 
manager in Microsoft's Windows 
Server division. 

"Windows 2000 was really 
the release where perfor- 
mance and reliability infra- 
structure were within the serv- 
er. Windows [Server] 2003 is 
an improvement on that archi- 
tecture," he said. 

THE ACTIVE DIRECTORY ISSUE 

While Microsoft tries to per- 
suade its customers to upgrade, 
one of the reasons it lists as a 
most compelling strength of 
Windows Server 2003 also hap- 
pens to be one of the main rea- 
sons customers have stuck with 
NT: Active Directory. Intro- 
duced with Windows 2000 
Server, Active Directory is a 
database of information about 
users, computers, peripherals 
and other resources on an 
extended network. Serving as 
the central mechanism for user 
authentication not only for log- 
ins, but also for applications like 
Microsoft's Exchange e-mail 
server, Active Directory is more 
scalable and offers more 
options than the domain system 
used in NT, but it requires net- 
work administrators and man- 
agers to know a lot more, 
according to Doug Hazelman, 



director of product manage- 
ment at Aelita Software Corp. 
(www.aelita.com), a Dublin, 
Ohio-based company specializ- 
ing in products that help orga- 
nizations migrate from NT. 

"There's a much greater 
learning curve between NT 
directory and Active Directory," 
he explained. "In NT, there 
wasn't much of a directory; you 
had users and groups, and that's 
about it. With Active Directory, 
there are things like namespaces 
and DNS. The complexity is a 
lot greater than it was in NT." 

Along with that complexity is 
the added cost of hiring staff to 
evaluate and do the migration, 
said Rob Zelinsky, director of 
network systems at Resurrection 
Health Care (www.reshealth 
.org) in Elk Grove Village, 111. 
The medical facility uses NT and 
does not plan to move to a new 
server for at least another 12 
months. "We would have to 
devote a team of 12 people for 
six months," he said. 

In addition to those people's 
salaries, his company would 
have to account for possible 
downtime as it moved to the 
new operating system, he said. 

Microsoft contends that the 
payoff is much greater if organi- 
zations take the plunge and 
move to Windows Server 2003, 
however. For one thing, by 
using Active Directory, organi- 



zations reduce the number of 
servers they need as domain 
controllers, according to Micro- 
soft's O'Brien. "A customer, by 
making the decision to do noth- 
ing, takes from [his organiza- 
tion] the opportunity to save 
money in its environment," he 
said. "By reducing the number 
of physical servers I have, I can 
do more automated tasks and 
do more valuable IT activities 
within my infrastructure." 

Intrawest Corp. (www 
intrawest.com) is taking advan- 
tage of Windows Server 2003's 
more granular management sys- 
tem to manage its various resorts 
more easily, said systems architect 
Phillip De Connick. "What we 
have been working with up until 
this stage is each and every resort 
that came on board would be an 
NT 4 domain with two-way trust 
to at least one other domain. [As 
we add more resorts,] manage- 
ment of those domains becomes 
more difficult," he said. "Active 
Directory takes these self-con- 
tained domains where we can 
break up administration at a more 
granular level. Instead of having 
30-odd domains to manage, we 
have one." 

Moving beyond the Active 
Directory issue, O'Brien believes 
that other performance and 
administrative enhancements in 
Windows Server 2003 might 
together win over NT users. 



Among those are the ability to 
specify individual administra- 
tive rights, rather than the 
all-or-nothing administration in 
2000 Server; better clustering 
capability; support for the .NET 
Framework; and improved 
security, including firewalls and 
Kerberos 5. 

NT TO LOSE SUPPORT 

Features may not be enough to 
drive people to another operat- 
ing system, said Resurrection's 
Zelinsky. "Microsoft releases fea- 
tures that they think we'll want, 
but they're not must-haves," he 
said. "We don't need to collabo- 
rate like they want us to. Our 
user community is not the most 
advanced. They log in to file 
and print services, and they use 
e-mail and they're pretty happy." 

In fact, the medical center is 
content with NT, which Zelin- 
sky said is stable and reliable. 
What may end up pushing users 
off NT and onto Server 2003 is 
that Microsoft is phasing out 
the aging operating system. 
Starting Jan. 1, 2004, the non- 
security hot fixes will no longer 
be available. At the start of the 
following year, security fixes, 
pay-per-incident, and premier 
and online support will stop. 

"Nobody in their right mind 
would run any operating system 
without support," said Zelinsky. 
"It's suicidal." I 



Zero G Updates Running Applications 

New release of InstallAnywhere focuses on server software 



BY ALAN ZEICHICK 

Looking to accommodate serv- 
er operating systems such as 
NetWare, Red Hat Linux 9 and 
Windows Server 2003, San 
Francisco-based Zero G Soft- 
ware Inc. has released version 
5.5 of its installation-building 
tool, InstallAnywhere. 

A major innovation, claimed 
Trent Wheeler, program man- 
ager for InstallAnywhere, is that 
the new release can install 
upgrades over running applica- 
tions. "You have a running serv- 
er application; you don't want to 
bring the machine down to 
upgrade the software. You want 
an installer that can respond 
intelligently to the existing para- 
meters on the system," he said. 

While not every application 




InstallAnywhere can create application installers for a wide variety of 
operating systems. 



can be installed without stop- 
ping, "depending on the oper- 
ating system and exactly how 
the server system is running, it's 



not actually that hard to do," he 
added. For example, Wheeler 
said that on Windows servers, 
files lock, and "so a lot of the 



support we've added is for Win- 
dows services. So, we may need 
a reboot if a DLL is locked." 

InstallAnywhere attempts 
to be smarter about upgrades as 
well, he said. "We also have the 
ability to detect previously 
existing files now, and if certain 
files exist, then go down a spe- 
cific set of [installation] logic." 
This can be used, said Wheeler, 
to accommodate complex 
upgrade paths within a single 
installation file. 

Regarding the help files, 
Wheeler said, "as installations 
have become more complicated, 
your application may have 
sophisticated configuration in- 
structions. While a lot of that 
can be done through InstallAny- 
where, sometimes you need to 



display additional information." 
"Installers don't generally 
have any help at all," added Eric 
Shapiro, founder and CEO of 
Zero G (www.zerog.com), "but 
with enterprise software, there 
are questions like 'What do you 
want the port number to be?' or 
'Which domain host do you want 
to have?' that may be easy if you 
understand the terminology — 
but might have a specific refer- 
ence for your specific applica- 
tions. Our help isn't on how to 
use the installer itself, but to pro- 
vide guidelines for deployment." 
InstallAnywhere 5.5, avail- 
able now, also is shipping for 
Mac OS and Unix. The pro- 
gram's standard edition costs 
US$995 per developer seat; the 
enterprise edition, which allows 
for headless installations, local- 
ization into 29 languages, more 
complex installer rules and a 
Java-based API, is $2,995. The 
Mac OS X version is $1,995. I 
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X Aware Continues Move Toward Integration 

Updated suite includes data factoids, packaged-app wizards, support for JAAS, RMI 



BY ALAN ZEICHICK 

Continuing its migration from 
a pure-play XML database pro- 
vider to a data integration sup- 
plier, XAware Inc. has updated 
its integration platform, XA- 
Suite. Version 3.0, which 
began shipping in late May, 
adds new features for data 
transformation, security and 
connectivity to enterprise 
packaged applications. 

The suite consists of a data 
integration server called XA- 
iServer, a visual design tool 
called XA-Designer, and adap- 
ters for external data sources. 
According to the company, the 
XA- Suite aggregates data from 



multiple information sources 
into a single virtual XML data- 
base with a common schema. 
That virtual database can then 
be accessed by Web servers or 
desktop applications to provide 
a single view of the data, 
regardless of its original source. 
The new release adds fac- 
toids, a new facility for creating 
reusable programmable func- 
tions for manipulating incom- 
ing data in real time, such as to 
perform format transforma- 
tions, arithmetic conversions 
and aggregation functions such 
as subtotaling. The company 
says that the XA-iServer also 
now can handle streaming 



XML documents more effi- 
ciently through a better memo- 
ry management scheme. 

The visual design tool, XA- 
Designer, now includes a drag- 
and-drop mapping editor that 
converts from one schema to 
another, intended for convert- 
ing in-house data formats to 
and from industry schemas 
such as JusticeXML, according 
to XAware. The company offers 
Java and Windows versions of 
the tool. 

XAware (www.xaware.com) 
says that the Java-based suites 
security model now conforms to 
the JAAS, the Java Authentica- 
tion and Authorization Service. 



This provides a simplified way 
for users, or end-user applica- 
tions, to identify themselves to 
the integration server. XA-iServ- 
er then can offer a variety of 
XML-based views depending on 
the user's specified roles, as cre- 
ated by the visual designer. 

For access to enterprise 
applications, XA- Suite 3.0 in- 
cludes new configuration wiz- 
ards for connecting to SAP's 
enterprise resource planning 
and Siebel's customer-relation- 
ship management software. 
The company says that the 
suite now has full bidirectional 
connectivity with those pack- 
aged apps. XAware had already 



offered unidirectional adapters 
for SAP, Siebel and other ERP 
and CRM packages, as well as a 
variety of databases and main- 
frame applications. 

The new version also 
supports Java-based Remote 
Method Invocation, to allow 
the integration server to talk to 
external applications that allow 
RMI. 

The price of the suite ranges 
from US$5,000 to $50,000, de- 
pending on processor and con- 
nectors. The XA-iServer can be 
deployed on Windows as a Java 
JAR file, or as a stateless EJB 
message bean on J2EE app 
servers. I 



From Garden.com to SQL Performance 

Start-up commercializes P6Spy open-source database tool 



BY ALAN ZEICHICK 

In the late 1990s, Garden.com 
was the poster child for the new 
breed of dot-com companies — it 
had a simple business model 
focused on online ordering and 
delivery of garden supplies, a 
valuable domain name and a 
US$49 million initial public 
offering in September 1999. But 
by November 2000, the compa- 
ny joined fellow highfliers such 
as Pets.com on the scrapheap, 
with its 290 employees laid off 
and its famous Web address sold 
to the Burpee seed company. So, 
what did its founder, Cliff 
Sharpies, do? Raise more money 
and start another company, this 
time selling development tools 
instead of garden tools. 

Sharpies is now president 
and CEO of IronGrid Inc. 
(www.irongrid.com), an Austin, 
Texas-based firm that's con- 
centrating on lightweight tools 
for Java developers. Sharpies 
described the company's busi- 
ness model as the antithesis 
of large companies in the mar- 
ket, such as IBM with its Ratio- 
nal product line, or Borland 
with its Optimizeit suite, or 
Quest's JProbe, which he char- 
acterized as products that 
developers find too expensive 
and complex. 

By contrast, Sharpies said, 
IronGrid will offer low-priced 
performance or debugging 
problems. The first two: Iron- 
Eye SQL, newly updated to 
version 1.1, and the recently 
introduced IronEye Cache. 



Sharpies described IronEye 
SQL as a commercialized ver- 
sion of P6Spy, an open-source 
tool that intercepts database 
access statements using JDBC. 
P6Spy was originally developed 
by Andy Martin, then the CTO 
of Garden.com, to help the com- 
pany tune its database-centric 
supply-chain system, explained 
Sharpies, and was released as 
open-source software under the 
Apache software license in 2001. 
Today, Martin is the founder of 
Digital Cheetah, a Web develop- 
ment company also in Austin. 

IronEye SQL works as a vir- 
tual JDBC driver, said Sharpies, 
helping developers identify 
performance issues with data- 
base calls from Java applica- 
tions. "It exposes traffic in the 
database," he explained, and 
can reveal which calls are taking 
too long to complete, or indeed, 
which calls may not even be 



necessary to the application. 

Version 1.1 of the tool, which 
sells for $395 per seat, can now 
be integrated with the Apache 
Ant build tool for Java; this allows 
each automated build of an appli- 
cation to be automatically tested, 
and the results viewed immedi- 
ately or logged for later analysis. 
This lets developers determine 
how an application's perfor- 
mance improves or degrades 
during coding, said Sharpies, 
and might be especially suited 
for agile processes such as 
Extreme Programming, where 
an application is built nightly, 
each time with additional func- 
tionality — and the potential for 
a new function to have a signifi- 
cant impact on start-up or run- 
time performance. 

The new IronEye Cache 
product is designed to help 
developers determine if caching 
would improve their applica- 
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IronEye SQL analyzes database calls so developers can optimize performance. 



tion's performance. 

The cache, which sits bet- 
ween the application and the 
database, stores SQL state- 
ments in memory to minimize 
database calls, he said, in addi- 
tion to gathering metrics about 
database usage. After running 
the application with the $695 
IronEye Cache installed, devel- 



opers can then analyze the 
cache results to see if a cache 
should be built directly into the 
application, and if so, how the 
cache should be configured. 

Sharpies wouldn't say which 
other tools are under develop- 
ment, but indicated they would 
be similarly priced and targeted 
at specific coding issues. I 



N SOFTWARE'S EDI COMPONENTS EXPAND TO .NET 



BY ALAN ZEICHICK 

Component vendor N Software 
Inc. is continuing to expand its 
.NET product line, this time 
with IP Works EDI for .NET, 
which helps developers send and 
receive secure electronic data 
interchange transactions across 
the Internet. 

IP Works EDI fits within the 
company's family of connectivi- 
ty-oriented products, many of 
which are focused on various Win- 
dows component models, includ- 



ing ActiveX, COM and .NET 

The protocol used by the IP 
Works EDI component set, 
according to the company (www 
.nsoftware.com), is AS2, an 
Internet Engineering Task Force 
(IETF) draft specification for 
secure real-time transmission of 
ANSI or UN/EDIFACT-compli- 
ant EDI data over HTTP. 

The AS 2 draft spec was pro- 
posed in January as an update to 
the IETF's AS1 protocol, which 
transmitted data via e-mail as 



MIME attachments. 

N Software's pricing model 
for IP Works EDI is based on 
hub-and-spoke distribution that's 
common within EDI trading 
networks, where you have one 
company that's exchanging bid 
requests, orders, inventory status 
and other transactions with a 
large number of providers — the 
type of situation you get with 
General Motors or Wal-Mart. 

"The spoke license is free. 
This allows anyone to use IP 



Works EDI to build client 
applications that send EDI via 
AS 2 to anyone," explained Eric 
Madariaga, a program manger 
at N Software. "However, in 
order to receive data from their 
trading partners, they will 
either need their partner to 
have a hub license of IP Works 
EDI, or they will need a hub 
license of their own." 

The hub license will be 
priced around US$1,495, he 
said, and can communicate with 
any AS 2-compatible server. IP 
Works EDI was set to be 
released in early June. I 
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Scavenging Web Services With Seagull 



from a browser. "You allow peo- 
ple, not necessarily developers, 
but mortal human beings and 
business analysts, to develop 

LegaSuite Studio turns WSDL files into ASP.NET applications ' B £Sl*fc»-*-«. 




LegaSuite 
creates XML, 
COM and Java 
mainframe 
interfaces, 
says Seagull's 
den Haan. 



BY EDWARD J. CORREIA 

Like food scraps on a park 
bench, Web services are a com- 
modity to be sought out and 
consumed. And while such a 
metaphor may not have been in 
the minds of developers at 
Seagull Software Systems Inc., 
capabilities of its LegaSuite 
Web Services Studio released in 
late May conjure up the image. 
According to Andre den 
Haan, Seagull's vice president of 
product strategy, the tool con- 
sumes WSDL files, public or 
private; models 
their workflow in 
its drag-and-drop 
environment, in 
I which developers 
I add UI logic; and 
then spits out 
complete .NET 
project code. "The 
end result is an 
ASP.NET app- 
lication with all 
files deployed to 
the server," in- 
cluding C# source 
code, Web forms and Visual Stu- 
dio .NET project files. "Should 
[a developer] decide to modify 
the code, you can do so," but 
knowledge of .NET coding is not 
necessary to use the tool effec- 
tively, he claimed. 

Though it can stand alone, 
LegaSuite Web Services Studio 
also is offered as part of Seagulls 
LegaSuite Software Platform, 
enterprise tools that include a 
host-to-Web environment that 
makes COBOL and mainframe 
apps accessible through Web 
services. "Once everything is 
expressed in a WSDL file, you 
will need a tool like LegaSuite 
Web Services Studio to consume 
those Web services and turn 
them back into applications." 

Indeed, den Haan believes 
that Web services will be a sig- 
nificant part of all future devel- 
opment. "We're in the second 
or third phase of a chain reac- 
tion that was ignited by Web 
services, which initially were 
used for internal point-to-point 
communications and integra- 
tion, and have become adapted 
across enterprises and firewalls. 
Now they are a ubiquitous part 
of software development." 

With its tools, the company 
(www.seagullsw.com) mainly tar- 
gets the large enterprise, such as 
utilities and insurance compa- 



nies, many of which den Haan 
said still use mainframes. "Those 
companies also have large call 
centers, [which] nine out of 10 



times reside on big mainframes. 
To modernize or create new ver- 
sions of the call center is a very 
big deal." But with LegaSuite 



tools, den Haan claimed, even 
nontechnical staff can create 
XML, COM and Java interfaces 
to permit mainframe data access 



dio 2.0 costs US$5,000 per 
developer seat; deployed appli- 
cations require a Windows 
2000/03 server. I 
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MySQL AB has released versions of its MySQL database software for 
the AMD64 architecture running on Linux, and on x86 processors run- 
ning QNX's Neutrino 6.2.1 operating system . . . Oxford, U.K.-based 
QED Business Systems Ltd. has released FireXML Parser, a Windows 
application that lets mainframe batch jobs use XML-formatted data 
. . . Munich, Germany-based glnstall Corp. has updated its Ghost 
Installer Studio, a tool for XML-based software installations. Version 
3.6 now works with VS.NET 2003, as well as with Borland's Windows 
IDEs, and has RSA-based encryption keys ... IBM Corp. has previewed 
DB2 8.0, its first 64-bit version for the mainframe. The database 
increases maximum table size to 16 exabytes. It also natively supports 
XML and Java, and allows a database schema to be modified without 
stopping the database . . . The first production version of Raining Data 
Corp.'s TigerLogic XML database is designed as a midtier operational 
data store, and uses the Pick Universal Data Model. Version 1.1 of Tiger- 
Logic is available for Solaris and Windows for US$25,000 per server 
. . . The latest version of MKS Inc.'s MKS Toolkit, a -m _*-^ 

set of Unix-like developer utilities for Windows, now ITl IV\Jl : .. 
runs on 64-bit Windows. The toolkit also includes a 
new 64-bit SDK . . . Jungo Ltd. has added Windows 
CE .NET on the MIPS platform to its supported hardware list for Win- 
Driver, its device-driver toolkit. Version 6.02 also works with PCI and 
USB devices running Windows Server 2003 . . . Xbridge Systems 
Inc. is offering a US$10,000 add-in for its Xbridge Host Data Connec- 
tion that provides access to IMS databases on mainframes 
. . . Edition 5 of Rogue Wave Software Inc.'s SourcePro C++ compo- 
nent set now works with Intel's latest C++ compiler for Linux. It's also 
faster at serializing SOAP objects, and supports openSSL 0.9.7a 
. . . Lead Technologies Inc. has shipped a version of its LeadTools 

Imaging Library for PocketPC 2002. 
¥W* " " The C-language library, which runs on 

both ARM and x86, handles image processing, color conversion, com- 
pression and viewing of files in dozens of file formats . . . CodePro 
Express is a new add-in for Eclipse and IBM's WebSphere Application 
Developer. The US$199 tool, from Instantiations Inc., checks Java code 
against industry-standard and corporate best practices . . . Fair Isaac 
Corp. has updated its Java-based Blaze Advisor business-rules man- 
agement software. Version 5 can build graphical representations of 
decision trees, and has new features for working with XML schemas 
. . . Neon Systems Inc. has released a SQL adapter for IBM's IMS main- 
frame database. The Shadow Interface for IMS/DB also allows RPC 
access via the J2CA, JDBC or ODBC APIs . . . Appligent Inc. has updat- 
ed AppendPDF Pro, its server-based application for outputting 
Portable Document Format files, to be programmed via XML. Version 
3.0 also can produce 40-bit and 128-bit encrypted files 
. . . Reviewer for Rose 2.0 is an updated UML model review tool from 
Select Business Solutions Inc. The new version provides more detailed 
error and warning messages, and can accommodate cyclic dependen- 
cies within the review process . . . CipherSoft Inc. is now offering 
PL/SQL Converter, which migrates code from Oracle's SQL-based pro- 
gramming language to Java . . . Version 1.2 of ANTS Profiler, a .NET 
code analysis tool from Red Gate Software Ltd., includes a new Visual 
Basic and C# code parser. The tool costs US$195 per seat 
. . . Spectrum Software Inc. has updated its SpectrumSCM Java- 
based configuration-management server. Version 1.1.3 adds session 
pooling, event/trigger APIs, client/server version validation and XML- 
based data migration . . . Solid Information Technology Corp. has 
updated its BoostEngine in-memory database. Version 4.0 now runs 
on OSDL Carrier Grade Linux . . . The new version of Visual Build Pro- 
fessional from Kinook Software Inc. now supports Borland's JBuilder 
and Delphi, Perforce SCM and Microsoft's SQL 
Server. Version 5.0 of the build utility, which 
runs on Windows, costs US$295 per developer 
. . . Pegasus Imaging Corp. has released its PICTools JPEG-LS com- 
pression toolkit, a C-language library. JPEG-LS is a new ISO-standard 
lossless format for 2-to-16-bit grayscale and 24-bit color images. The 
library costs US$3,999 . . . Excelsior LLC has updated its Jet Java Vir- 
tual Machine for Windows. Version 3.11 works with J2SE 1.4, and 
includes new JIT cache optimization and ► continued on page 1 






ANTs Database Focuses On 
Stored Procedures, SQL92 

Company claims v. 2.0 doubles performance of Data Server 



BY EDWARD J. CORREIA 

"Oracle is great at solving most 
database problems," said Gary 
Ebersole, president and chief 
operating officer of ANTs Soft- 
ware Inc., which develops and 
markets a high-performance 
SQL database development 
system. "But the 10 percent of 
problems they can't solve, that's 
what we're going after." 

That 10 percent are data- 
bases used by hundreds or 
thousands of concurrent users 
for entry to online transaction 
processing systems requiring 
real-time access to data such as 
stock trading, telecom directo- 
ries and financial systems. 

On May 31, ANTs (www 
.antssoftware.com) was sched- 
uled to release Data Server 2.0, 
which it said will have the abili- 
ty to execute stored procedures 
and will be fully compliant with 
SQL92, the ANSI standard 
SQL command set. According 
to Ebersole, the ability to exe- 
cute stored procedures should 



L 

ANT's earlier re- 
lease was more 



have been present from 
the start. "Our earlier 
release was more of an 
early prototype. I took a 
look at it and realized 
we had some things to 
do. Our 2.0 release real- 
ly represents our com- 
ing-out party." 

Ebersole said that 
stored procedures ben- of a prototype, 
efit developers in sev- says Ebersole. 
eral ways. Aside from 
the reduced client communi- 
cations overhead, they help 
facilitate code reuse. "Often 
when you're doing an opera- 
tion against a database, you're 
applying a collection of SQL 
statements and conditional 
logic; usually looking for one 
result back. What many 
[developers] will do is encap- 
sulate those to make it easier 
to get the result from the data- 
base without having to incor- 
porate a lot of SQL in the 
application." 

Ebersole claims a twofold 



improvement in perfor- 
mance, for which he 
credits microthreading, 
a technique that lever- 
ages symmetric multi- 
processing hardware 
capabilities, and compi- 
lation of SQL com- 
mands, which he said is 
unique to ANTs. 

"No database sys- 
tem that I know of does 
runtime compilation to 
machine code. Like in Java, it 
turns out that you reuse the 
same [SQL] procedures all the 
time, so you only have to com- 
pile them once, and then you 
cache them. Each time some- 
body sends a command, we 
look it up on the cached com- 
mand table. [If we] see that it's 
already compiled, all we [take 
are] the parameters," he 
claimed. 

Data Server 2.0 runs on 
Solaris 8 and Windows 2000, 
and costs US$25,000 per server 
processor. I 



.NET the Object of New 0/R Tool 

Start-up Olero aims to generate data layers, models 



BY DAVID RUBINSTEIN 

A new company, Olero Soft- 
ware Inc., is targeting the 
.NET Framework with the re- 
lease late last month of an ob- 
ject-to-relational database map- 
ping tool called ORM.NET 
that automates the generation 
of a data layer and data object 
models. 

ORM.NET provides a log- 
in ID for users to connect to a 
database server, and allows 
them to select the database 
they wish to create a layer for, 
explained Joseph Benjamin, 
president of Olero, which was 
spawned late last year out of 
CatinHat Software Inc. (www 
.catinhatsoftware.com). 

Benjamin said that ORM 
.NET reads all the schema 
information and returns visual 
representations — each table is 
represented as an object in a 
data object model, while each 
column is shown as a property. 
Underneath, ORM reads the 
relationships defined in the 
schema, so parent objects and 



children of those objects also 
are visually displayed, he said. 

"Traditional code generators 
force you to manually create 
your classes and then map 
those back to your schema," 
explained Benjamin. "With 
ORM, you point at the data- 
base and we automatically 
resolve the mapping, which is 
a huge time-saver." Benjamin 
estimated that as much as 40 
percent of total development 
time can be cut. Creating data 
layers, he said, "is the most 
tedious, time-consuming and 
boring part" of application 
development. 

ORM.NET takes advan- 
tage of one of the key features 
of Microsoft's ActiveX Data 
Objects .NET (ADO.NET)— 
its data sets. In ADO.NET, he 
said, data sets can be used to 
hold hierarchical data tables, 
such as a customer, the cus- 
tomer's orders and fulfilled 
orders. What ORM.NET does 
is abstract out the data layer, 
generate a SQL statement, 



and commit all changes back 
to the database with a single 
call, he said. 

He added that the O/R tool 
allows for customizations that 
affect how the data object 
model is produced. "You can 
set the scope to non, or pro- 
tected or internal, and can set 
them by defaults," he said. 
"The relationships can be 1-to- 
1 or 1-to-many." 

Benjamin admitted the 
biggest hurdle Olero (www 
.olero.com) faces is winning 
over developers generally leery 
of relying upon generated 
code. "We think we've done a 
good job making a useful API 
and a well-written code gener- 
ator," he said. The generated 
code is output as C# or Visual 
Basic .NET; ORM.NET works 
with any standard relational 
database. 

ORM. Net version 1.4 is 
available now and sells for 
US$495 per developer, with 
one year of upgrades and e-mail 
support. I 
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J2EE Extends to NetWare 
With App Server Upgrade 



BY YVONNE L. LEE 

Just under a year after acquiring Silver- 
stream Software Inc., Novell Inc. has a 
J2EE application server that works with 
NetWare. 

Version 5 of Silverstreams Extend 
Application Server, which began ship- 
ping in late May, has been retooled to 
work on Novell's operating system, and 
is now rebranded as a Novell product. 

"By having the application server run 
on NetWare, you take the investment 
you already have in your NetWare infra- 
structure and you breathe new life into 
it," said Frank Auger, Novell's vice pres- 
ident of product management and sup- 
port for Extend products. 

The company had planned to ship the 
Extend app server along with the rest of 
the Extend suite, but instead pushed for- 
ward the release date to coincide with the 
midyear release of NetWare, Auger said. 

Customers who have maintenance 
licenses for NetWare can upgrade to the 
next version at no extra cost. Auger esti- 
mated that the company has 4 million 
such users. 

No additional functionality has been 
added to the application server. Instead, 



the increased functionality will be added 
to the other parts of the suite — Novell's 
Composer integration server, and Direc- 
tor interaction and portal server. 

"If you stray too far from [the Java 
specifications], you do away with the 
portability part of the story," Auger said. 
"The application server is the wrong lev- 
el to differentiate from a feature per- 
spective." 

The Extend app server is compatible 
with the J2SE 1.4 specification and has 
received Sun's Java Verified imprimatur 
for interoperability, according to Novell. 

It is available individually in three ver- 
sions. The Enterprise Edition supports 
clustering and provides for failover. It has 
a retail price of US$10,000 per processor. 
The $5,000 per-processor Professional 
Edition lacks the clustering support. The 
$495 Developer Edition is limited to 10 
concurrent sessions. 

It also will be bundled with NetWare, 
and with Composer and Director, as part 
of the Extend suite when it ships in the 
third quarter. 

Extend Application Server runs not 
only on NetWare, but on HP-UX, Linux, 
Solaris and Windows. I 



Apple WWDC to Show Off 'Panther' 



BY YVONNE L. LEE 

Apple Computer Inc. CEO Steve Jobs 
will showcase the next version of the 
Mac OS X OpenBSD-based operating 
system at the company's Worldwide 
Developers Conference, beginning June 
23 at San Francisco's new Moscone West 
convention hall. 

Originally scheduled for May 19-23 
in San Jose, the show was delayed so that 
Apple could finish more work on the 
operating system, code-named "Pan- 
ther." Apple refers to the operating sys- 
tem as "the next release of Mac OS X," 
but rumors have circulated on various 
Mac news sites about whether it will be 
numbered OS 10.3 or something else. 

"That's one of the things about 
Apple," said Richard 
Kerris, senior manager 
for worldwide develop- 
er relations. "Everyone 
likes to guess and think 
they know [what we're 
doing], and we like to 
surprise them." 

The five-day confer- 
ence will now occur June 
23-27. 

The Cupertino, Calif. - 
based company has 
planned more than 170 
sessions, falling into the 
categories of enterprise 
IT, QuickTime, Apple 
developer tools, applica- 



WWDC 2003 
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tion frameworks, core OS, graphics and 
imaging, and hardware. The enterprise 
IT track is new this year, and the Quick- 
Time track has been expanded, accord- 
ing to Apple. 

The QuickTime track will fold in what 
was once a separate conference, Quick- 
Time Live. Although that conference 
largely focused on creating QuickTime 
content, it will interest developers 
because many applications link to Quick- 
Time APIs, according to Frank Casano- 
va, director of QuickTime product mar- 
keting. Casanova claimed that 12 new 
applications ship daily with links to the 
multimedia technology. 

The newest version of QuickTime, 
announced June 3, will support the 
3GPP file format, mak- 
ing it possible for devel- 
opers to create streamed 
media content that can 
be played on 3G mobile 
phones, Casanova said. 

The enterprise IT 
track will focus on Mac 
OS X Server, and Xserve 
server and storage tech- 
nologies, as well as the 
open source and open 
standards on which 
they are based. Other 
topics in this track 
are Java, WebObjects, 
Directory Services and 
system integration. I 
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OStudio Imports PMD Quality Rules 

Java code analyzer uses open-source extensibility model 



BY ALAN ZEICHICK 

QStudio Professional, a tool 
that assesses the quality of cus- 
tom Java applications, has been 
updated to allow developers to 
add custom rules based on the 
open-source PMD specifica- 
tion. The software is developed 
by QA Systems, based in Ban- 
nik, Netherlands. 

Version 1.9 of the product, 
which will be available later this 
month for US$295 or €295 per 
developer seat, is focused on 
compatibility with PMD, an 
open-source static-analysis tool 
(pmd.sourceforge.net). PMD 
scans Java source code to look 
at syntactic and logical errors, 
such as unused local variables 
or duplicate import statements. 
(According to the PMD pro- 
ject's authors, "We've been try- 
ing to find the meaning of the 
letters PMD. Because, frankly, 
we don't really know.") 

The PMD tool uses its own 
syntax to define rules that are 
written either as a Java class or as 
an XPath expression. QStudio 
Pro 1.9 lets developers add PMD 
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QStudio provides code analysis within Borland's JBuilder or other Java IDEs. 



rules that are written as Java 
classes, according to the compa- 
ny (www.qa-systems.com). The 
tool can run within its own IDE, 
or as a plug-in to extensible IDEs 
such as Borland's JBuilder or 
IBM's Eclipse or WebSphere 
Studio Application Developer. 

QStudio Pro is available for 
Linux, Solaris and Windows. 



The company also offers a 
US$2,950 or €2,950 version, 
called QStudio for Java Enter- 
prise, which lets projects or 
teams share common coding 
standards, and which reports 
on metrics about source-code 
compliance with ISO/IEC 
9126, a set of standards for 
software quality. I 
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< continued from page 8 

deployment tools. Pricing starts at US$200 . . . Altiris Inc. has updat- 
ed its Altiris Deployment Solution, a tool for remotely installing and 
updating software on server and client computers. Version 5.5 adds 
new role-based and scope-based security, a new imaging engine and 
scripted installations . . . Orsus Solutions Ltd. has updated its Orsus 
Mobile Framework, an application framework for .NET. Version 5.1 
adds connectors and a visual mapping tool for Web services 
. . . AmberPoint Inc. has shipped a .NET version of its Web services 
management software, written in Visual C#. Previously, the company 
offered only a J2EE version of AmberPoint. 



i PEOPLE | 



JoMei Chang has been named chairman of Vitria Technology Inc., a 
provider of business-integration tools; Gary Velasquez will succeed 
her as CEO in addition to his current role as president . . . Charles 
Phillips, a software industry analyst with Morgan Stanley, has joined 
Oracle Corp. as an EVP focusing on customer- and partner-facing 
activities . . . Sleepycat Software Inc., which makes the BerkeleyDB 
database, has hired Rex Wang as VP of marketing; Wang had headed 
worldwide marketing at Openwave Systems Inc. 



, STANDARDS , 



Sun is updating its Java Community Process; version 2.6, as detailed 
in JSR-215, is open for public review. The update aims to improve 
transparency by mandating stricter reporting by expert groups and 
specification leads . . . The W3C has approved and adopted a Patent 
Policy, which seeks to ensure that its specifications will be royalty- 
free. The policy includes an exception process to handle conflicts. I 
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JAVA PROCESS 

4 continued from page 1 

which is scheduled for a final 
draft in October and final 
approval in November. 

The proposed changes in 
JCP 2.6 are the second revision 
to the process in eight months. 

"It gives you a more trans- 



parent and open process 
because it makes all the review 
phases visible to the general 
public, it brings JSRs on aver- 
age quicker, and community 
members have more visibility 
into the activity of the JSRs and 
expert groups," claimed Onno 
Kluyt, director of the JCP pro- 
gram management office. 



The benefit of moving the 
public comment and review to 
earlier in the process, accord- 
ing to Kluyt, is that those sup- 
porting a specific JSR can ask 
questions freely without wor- 
rying about an intermediate 
executive committee ballot 
that could put the kibosh on 
the whole effort. 



Traditionally, Sun has been 
criticized most vociferously by 
IBM and HP for having too 
strong a role in controlling the 
Java specifications, but those 
feelings aren't universal, as oth- 
er JCP (www.jcp.org) members 
argue that the community 
review works well. 

"I do believe it's Sun's puppy, 
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but you need a big vendor to 
give it credibility," said Dirk B ar- 
tels, CEO of JDO Central, and a 
co-founder of Poet Software. 

"The standards body, the 
community, needs to agree with 
the changes that Sun needs to 
make or another community 
member like IBM or Oracle 
needs to make [in a proposed 
specification]," said Kluyt. 

To wit, the executive com- 
mittee rejected four specifica- 
tions that Sun initiated concern- 
ing Java 2 Micro Edition 
(J2ME)— JSRs 216 through 219 
(See "CDC 1.1 Skips a Beat," 
page 19). 

"The process doesn't let 
[Sun] push something out over 
everybody," said Tim Sloane, 
director of Internet infrastruc- 
ture research at Aberdeen 
Group in Boston, "but it does 
allow them to say 'OK, we're 
putting it to a vote now, and 
we're not letting any more fea- 
tures be put into it.'" In this 
way, Sun can control the pace at 
which changes are adopted, but 
it cannot unilaterally choose 
whether or not specific changes 
are brought to the table. 

CRITIC SUPPORTS CHANGES 

Although IBM is not the spec 
lead for JSR-215, it said in a 
prepared statement that it "had 
a key role in the development of 
the most recent updates to the 
Java Community Process." The 
company went on to say that it 
would like to see greater com- 
munity perspective in the evolu- 
tion of Java. 

"The more that Java tech- 
nology is associated with a coor- 
dinated, strong, industrywide 
effort rather a single company, 
the faster we'll see Java tech- 
nologies being adopted by 
enterprises," the statement 
said. IBM declined to reveal its 
own suggestions for changing 
the Java Community Process. 

However, the flip side to 
more participation may be 
that it takes longer for specifi- 
cations to get introduced, dis- 
cussed, reviewed and approved, 
said Sloane. "Openness not only 
controls how many people par- 
ticipate, but how long it takes 
to get a standard ratified. 
Now, we've [hypothetically] got 
200,000 participants — try to get 
that through a voting process, 
especially if you've got Micro- 
soft breathing down your back," 
said Sloane. "Even IBM would 
agree that it's important that 
the process move briskly in 
order for the standard to move 
forward." I 
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Four Views on Java 



In the weeks leading up to JavaOne, SD Times 
spoke with four leading Java luminaries to get 
their views on the platform and where it's going. 



BY ESTHER SCHINDLER 




James Gosling: 

On the Java Drawing Board 

As developers write ever more complex applica- 
tions to accomplish new feats of programming 
magic, they want their languages to make the 
task progressively easier. But, because their 
needs change and new technologies emerge, the 
computer language has to evolve, too. 

That's certainly the case with Java, at least according to James 
Gosling, the man generally viewed as its "father." Gosling, who is vice 
president and fellow at Sun Microsystems Inc., sees Java as both an 
enabling technology for things to come and as an accepted tool in the 
enterprise. ("They expect J2EE the way you expect oxygen. You'd be 
dead without it, but you don't think about it every day," he said.) 

"The wave of excitement is moving out from the center of the net- 
work," Gosling said, with cell phones and mobile devices — "and a big 
bag of J2EE and servers in the background feeding them." 

To get there, the language will get new features, but only when 
they make sense. There are always plenty of requests for Java en- 
hancements, most of which aim to make it easier to accomplish some 
task in the language. But, Gosling cautioned, sometimes the applica- 
tions are on one side, and the language — and its complexity — are on 
the other. "The proposed feature can't make the language harder to 
learn, even if it makes some things easier to do," he explained. 

Java gets both its strength and weakness from being a technology 
owned by the people who use it. While the end result is able to meet 
a broad selection of needs, the trade-off is that one has to do "a lot of 
things that look like a traditional political process," according to 
Gosling. "It's a challenge to do a statistical analysis on how useful pro- 
posed language changes would be, and come up with numbers that 
are really positive. But we have to consider: Is there enough bang for 
the buck?" 

Then there's the impact a new feature has on the marketplace. 
For example, implementing generics (a common supertype in the 
class hierarchy) in Java was discussed for a long time, and a few years 
ago generics became available as an unbundled add-on. But tool ven- 
dors weren't happy, because they didn't have enough time to add 
support for the features. 

Language features can be implemented in many ways, some of 
which cause heated debate. There were deep disagreements about 
the implementation of generics in C + + , which Gosling said was "con- 
demned by the academic community." Granted, Java isn't an acade- 
mic exercise — he described it as "a blue-collar system for people who 

► continued on page 14 

Rob Gingell: Lies My Software Told Me 

Our reliance on computer systems has crept up 
on us. Software that was never certified for mis- 
sion-critical situations is being used for such pur- 
poses anyway. Even when an environment is 
checked out for security and reliability, adding a 
new application wipes out the certification. 

That's a major concern to Rob Gingell, chief 
engineer at Sun Microsystems Inc. In addition to his responsibility 
for Sun's overall technical architecture and product line direction, 
Gingell is chairman of the Java Community Process (JCP), the com- 
munity-based process for evolving Java technology specifications, ref- 
erence implementations and associated technology compatibility kits. 

According to Gingell, building applications that we can rely upon 
is one of the reasons the JCP is so very important. "We do a lot of 
things, in running the JCP, to ensure that applications are never lied 
to. Not by malice, not by poor quality. Not by anything." 

Application compatibility is vital, Gingell said, because of the life- 
and-death situations relying on it. Java's being used in control man- 
agement systems for nuclear power plants, he said, even if it isn't 

► continued on page 14 
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George Paolini: The Standard Suspects 

If you ask a Java luminary to peer into his 
crystal ball, what's he likely to see? For 
George Paolini, vice president and general 
manager of Borland Software Corp.'s Java 
business unit, the mist first clears around the 
view of Web services. "There are staggering 
possibilities," said Paolini, who had served as 
Sun's technical evangelist for Java before join- 
ing Borland. 

Overhyping led to unrealistic expectations 
in the short haul, but the longtime Java activist 
believes that Web services will live up to the 
potential. Just not right away. "The promises 
that were made can be realized, but it's going 
to take longer than we initially expected. 
We're in the trenches now, trying to make it 
happen," he said. 

One challenge is developer misunder- 
standing about the definition of Web services. 
The concept — exposing application function- 
ality — has been around for a long time. But 
until recently, that exposure has been device- 
and hardware-specific, and developers 
haven't been writing applications that are in- 
herently services. 

Paolini explained, "Software development 
over the last 20 to 30 years has focused on de- 
veloping monolithic applications in which 
components and functionality are designed to 
achieve one result. Instead, Web services [are] 
all about exposing the functions and reaggre- 
gating them for new users, in almost a 'just-in- 
time' fashion with the components located 

Simon Nash: Java's Hidden Depths 




anywhere. This gives us a 
more dynamic, fluid use 
of services on the Web." 

Java's cross-platform 
heritage makes it the per- 
fect Web services envi- 
ronment, according to 
Paolini. "The strength of J2EE makes it a nat- 
ural. We have more simple access to data via 
XML, but Java's true value will come from 
transactional computing: particularly the im- 
mediate engine and the bridge into enter- 
prise applications for Web services via EJBs." 

In the short term, one effect of Web ser- 
vices development is a renewed emphasis on 
software engineering practices and complete 
life-cycle management, according to Paolini. 
With fewer monolithic applications being 
written, developers will need to spend more 
time on reiterative development — making de- 
sign requirements, testing and deployment 
tasks even more important than they are now. 

He expects to see a longer-term effect on 
Web services in mobile computing. "We're go- 
ing to have roaming capabilities with our lap- 
tops the way we do with our cell phones," pre- 
dicted Paolini. 

To achieve the technology goals, though, 
Paolini said the industry has to establish stan- 
dards — which is a never-ending chess game. 
"In some sense, it's pretty silly — people can 
behave like children in a schoolyard. We'll just 
have to wade through that." I 



We all have unappreciated capabilities wait- 
ing for the right opportunity. Jazz artist Ella 
Fitzgerald originally intended to be a 
dancer, but when she froze up on stage, she 
began to sing. 

Java is capable of many things, and it has 
solved all sorts of technical problems. Where 
has it been least well-exploited, so far? 

To Simon Nash, chief technology officer 
in IBM Corp.'s Java Technology Centre in 
Hursley, U.K., Java's as-yet-unrealized capa- 
bilities are network-related. 

Nash explained, "With portable executa- 
bles based on bytecode, and runtime en- 
gines available for just about every hardware 
and software platform, Java code is uniquely 
able to move around the network. Java 
also has a security model built into the lan- 
guage that allows execution hosts to set up a 
sandbox environment in which Java code 
can't damage the host environment in which 
it runs." 

Indeed, he added, "the ability to send ex- 
ecuting code round the network is a power- 
ful feature of Java that has not been exploit- 
ed very much because of concerns about the 
security, resource, management and au- 
ditability implications of doing this. 

"The trend is now toward portable data 
rather than portable code, with XML and 







Web services being used 
to transmit this data," 
Nash continued. "How- 
ever, the notion of mobile 
code is extremely power- 
ful and could open up a 
new breed of applications 
that would run on the network and dynami- 
cally adapt to changing conditions rather 
than being manually configured to run in a 
given topology. This flexibility could be very 
important for the grid as well as for on- 
demand computing, and could make Java 
even more successful than it currently is." 

With small devices becoming powerful 
enough to run J2SE, and with J2SE contin- 
uing to get bigger and bigger, Nash believes 
the time is right for the Java community to 
think about more modular componentized 
approaches to Java. 

"Instead of the boxes that are currently 
labeled J2SE and J2ME, perhaps there 
could be a base language with various add- 
ons and components, with each component 
defining different profiles to suit simpler or 
more complex usage. This approach would 
allow developers to put together configura- 
tions that look like today's J2SE and J2ME, 
as well as other combinations to suit their 
needs," he said. I 
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LINUX STUDY 

4 continued from page 1 

agers described themselves as 
committed to using Linux 
whenever possible, and another 
36 percent said that they would 
employ Linux when it's clearly 
the best solution. Three per- 
cent said that they were guard- 
ed in their response to Linux, 
and would use it only on non- 
mission-critical systems. Anoth- 
er 32 percent said that they 
don't use Linux, but wouldn't 
be averse to doing so, while 5 
percent said that they do not 
and would not use Linux. 

By contrast, when develop- 
ment managers were asked 
what their company's attitude 
about Linux was, the results 
were lower. Only 10 percent 
said that they would use Linux 
whenever possible, but 38 per- 
cent said it's used whenever it's 
the best solution. Twelve per- 
cent use it only on non-mission- 
critical systems, and 26 percent 
don't use it but wouldn't be 
opposed to doing so. The anti- 
Linux camp was larger when 
considering corporate attitudes, 
with 14 percent of companies 
describing themselves that way. 

The study showed that 70 
percent of those polled current- 
ly use Linux somewhere in their 
organization. Of those, 64 per- 
cent used Linux for Web 
servers, 51 percent for applica- 
tion servers, 46 percent for 



database servers and 44 percent 
for file servers. 

When asked if Linux was a 
supported corporate standard 
platform, 34 percent indicated 
that it was, and 25 percent said 
that it was not. A further 16 
percent said that it was not sup- 
ported, but would be allowed as 
an exception; another 11 per- 
cent said that it is not support- 
ed, but it is being considered. 
The remaining respondents 
said that their companies did 
not have standard platforms. 

Fifty-five percent of respon- 
dents build custom Linux appli- 
cations. Within that group, 74 
percent use Linux workstations 
to develop the applications, and 
49 percent use Windows work- 
stations. 

When it came to the concept 
of open-source software, 37 per- 
cent of respondents said that the 
open-source philosophy was a 
factor that did or would moti- 
vate their organization to use 
Linux. Twenty-nine percent said 
that the ability to view source 
code would influence them 
toward Linux, and 27 percent 
said it would be important to be 
able to modify the source code. 

USING ITS INFLUENCE 

The BZ Research study provid- 
ed a list of 26 factors, and asked 
if they would motivate the 
development manager's organi- 
zation to use Linux, or if those 
same factors would be an obsta- 



Which fa c tars did or would motivate your 
organization to use Linux? 
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cle to Linux adoption. 

The top motivators in favor of 
Linux were stability of the oper- 
ating system (65 percent), total 
cost of ownership (63 percent), 
deployment cost (61 percent), 
performance (58 percent) and 
platform security (50 percent). 

The most significant obsta- 
cles to Linux adoption were 
availability of technical support 
(35 percent), availability of 
applications (27 percent), qual- 
ity of technical support (23 per- 
cent) and availability of training 
(22 percent). 

When asked about the atti- 
tude of software developers 



toward Linux, 31 percent of 
respondents indicated that this 
would positively motivate their 
company to use Linux; 16 per- 
cent said that it would be an 
obstacle to adoption. 

The study, which was sub- 
mitted to a random sampling of 
SD Times' qualified readers, 
was developed in cooperation 
with Open Source Develop- 
ment Lab (www.osdl.org), an 
independent vendor consor- 
tium; 370 readers responded to 
the poll, which has a margin of 
error of 3 percentage points. 
BZ Research conducted the 
study in mid- May. I 



Which factors are obstacles to Linux adoption 
at your organization? 
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FOUR VIEWS 

< continued from page 13 
GOSLING 

needed to get their job done." 

But with major disputes 
about finding a sensible technol- 
ogy solution, sometimes it's wis- 
er to wait until the right answer 
becomes apparent. "I'm much 
happier leaving things out than 
doing something that's known to 
be stupid," Gosling said. 

So, what's likely to make it 
into the next language revision? 
While the decisions are far 
from certain, Gosling does have 
a few he favors. He's looking at 
a new version of the FOR state- 
ment packaging standard prac- 
tice around iterators. 

Autoboxing is another, in part 
because the feature — a transi- 
tion between primitive and true 
objects — has been asserted to 
be a win for enterprise uses. 

Another oft-asked-for feature 
enhancement is support for enu- 
merations. But Gosling said 
enums mean different things to 
different people. "If I had picked 
any of the ways to do enums, I 
would have gotten piles of hate 
mail. Any way has serious 
problems." However, one enum 
proposal has been "pretty much 
accepted," he said, and is slated 
for the next release. I 

GINGELL 

warranted for that use. Air- 
plane cockpits are full of em- 
bedded technology that simply 
has to work. 

Such ubiquitous technology 
has become too important to 
permit it to fail. "A few years 
ago," Gingell said, "some people 
went to bed thinking that they 
were running a Web site. When 
they woke up in the morning, 
they discovered they'd been run- 
ning a mission-critical part of 
their business." 

As a result, the JCP is putting 
a huge amount of effort into de- 
veloping standards and specifica- 
tions that developers — and their 
code — can rely on. 

However, people who come 
up with the new and exciting de- 
velopments always want to rush 
forward with innovation. But 
the new stuff is fragile, and 
needs life-cycle management 
built into it. That's true despite 
the apparent high cost of creat- 
ing Java implementations. 

"Yes, we should run the 
process as inexpensively as possi- 
ble," Gingell said. "But 'as possi- 
ble' has a floor. I never want an 
application to be lied to by any- 
thing that is Java," he said. I 
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SCO 



< continued from page 1 

Claybrook, research director for 
Linux, open source and Unix at 
Aberdeen Group in Boston. 

While most companies 
either have responded defen- 
sively, as Microsoft did, or 
issued brief statements that 



they intend to continue sup- 
porting Linux and open source, 
Novell issued the most sharply 
worded statement. 

First, Novell challenged 
SCO's assertion that it owns the 
copyrights and patents to Unix 
System V, pointing out that 
the asset purchase agreement 
entered into by Novell and 



SCO in 1995 did not transfer 
these rights to SCO. Second, it 
asked SCO to back up its claim 
that Unix System V code was 
copied into Linux. 

In a letter addressed to SCO 
CEO Darl McBride from Nov- 
ell president Jack Messman, 
Novell pointedly asks SCO to 
put up or shut up. The letter 



criticizes SCO for being what 
Novell calls vague in its asser- 
tions regarding Linux. 

"SCO claims it has specific 
evidence supporting its allega- 
tion against the Linux commu- 
nity. It is time to substantiate 
that claim, or recant the 
sweeping and unsupported 
allegation made in your letter. 
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Absent such action, it will be 
apparent to all that SCO's true 
intent is to sow fear, uncertain- 
ty and doubt about Linux in 
order to extort payments from 
Linux distributors and users," 
the letter said. 

"SCO's making claims and 
we're asking for validation is 
what it amounts to," said Novell 
spokesman Gary Schuster. 

According to reports pub- 
lished by the Reuters news 
agency, LinuxTag, which holds a 
technology fair and lobbies for 
Linux, told SCO to provide 
proof for its claims by May 30 or 
face court action in Germany. 

Analysts say that although 
the SCO actions cast a pall over 
Linux and could threaten its 
adoption, SCO isn't exactly 
making a great business envi- 
ronment for itself even if it wins 
the case. 

GENERATING ILL WILL 

SCO has the right to collect 
licensing fees for its intellectu- 
al property, Aberdeen Group's 
Claybrook said, but the way 
the company has gone about it 
has alienated both potential 
business partners and cus- 
tomers. "I think that SCO has 
set themselves up where they 
have no friends, everybody is 
mad at them, they've killed 
their Linux line, and they have 
a dead-end product," Clay- 
brook said. 

"While it has brought in 
some revenues, such as [from] 
Microsoft, it probably has been 
far worse in terms of its ability to 
conduct business in the future, 
because enterprises in general 
and user popular opinion is 
going against them and that 
goodwill to conduct business is 
going down the drain," said 
George Weiss, vice president 
and research director of the 
server group for Gartner Inc. 

Weiss said a summit between 
Linus Torvalds, the creator of 
Linux, and the Free Software 
Foundation to both remove 
the offending code and ensure 
that nothing similar happens in 
the future could resolve the 
problem, but added that he 
wasn't sure SCO wanted the 
offending code removed from 
the Linux offerings. 

"They don't want necessarily 
anyone to redress that claim," 
Weiss said. "They feel it is in 
fact that [an offense] exists and 
that they want compensation. 
If someone were to quickly 
hide, conceal, remove the 
offending code, it might weak- 
en their case." I 
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RootCause Ferrets Out Memory Leaks 



BY YVONNE L. LEE 

OC Systems Inc. was slated to 
begin shipping version 2.1 of its 
RootCause Java debugging tool 
on June 10, coinciding with the 
JavaOne conference. The biggest 
addition in the new version is a 
memory leak detector designed 
to protect bloated applications 
from crashing on the system. 

RootCause 2.1 is designed to 
work on production application 
without modification. 

RootCause tracks objects 
that have been allocated and 
identifies which ones haven't 
been de-allocated. Then, it dis- 
plays a report of objects accord- 
ing to which objects' memory 
allocation had grown at the 
fastest rate. Developers then 
can go to the specific lines in an 
application to see where the 
error is taking place. 

The program's interface had 
not been completed at press 
time, but OC Systems president 
Oliver Cole (www.ocsystems 



SERENA 



< continued from page 1 

over the years." 

Henderson could not say 
what would happen to the 
approximately 65 employees of 
TeamShare, based in Colorado 
Springs. Also, TeamShare was 
set to release version 6 of 
TeamTrack later this month; it 
is unclear if that is still on track 
to occur. 

Elsewhere, Serena (www 
.serena.com) announced an inte- 
gration of its Change Man ALM 
process management tool, and 
a tighter integration of its 
Change Man DS tool, with Mer- 
cury Interactive Corp.'s Test- 
Director. Users, Henderson said, 
"can manage test processes, 
scripts and programs throughout 
the application life cycle." 

Also, Serena announced net 
income of $6.9 million, or 17 
cents per diluted share, for the 
2004 first quarter ended April 
30. That was an increase of 12 
percent over the first quarter 
of fiscal 2003. Total revenues 
of $24.4 million for the quarter 
exceeded by 11 percent the 
revenues for the same quarter 
last year. 

With the TeamShare acqui- 
sition, the company forecasted 
second-quarter revenues of 
between $26 million and $27 
million. I 



.com) claimed that in the final 
version, the memory leak 
report would directly link to 
the lines in the code causing 
the error message. 

Cole added that the longer 



the leak-detection algorithm 
runs, the more accurate it 
becomes. 

The software works with C 
and C++ code, as well as with 
J2EE and J2SE. It also can 



detect leaks on remote comput- 
ers, according to the company. 

This version now runs on 
AIX and Linux, as well as 
Solaris and Windows. 

Running RootCause re- 



quires two pieces of software: 
the US$2,995 console that 
defines the traces and displays 
the results, and a $1,000 per- 
processor agent that collects 
the data. I 
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The Anatomy of a Complete 
Development Solution 



4th Dimension 2003 provides an environment 
for Rapid Application Development with an 
integrated database. Standalone applications 
can quickly and easily be created for both 
Windows and Macintosh platforms (including 
Mac OS X). 







WHEN THE 
SOLUTION 

MATTERS 

With no additional coding, your standalone 
application can be deployed in a cfient-server 
environment. Supporting mixed platform 
connectivity and automatic application 
distribution, 4th Dimension 2003 radically 
increases deployment efficiency. 
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Web 
Applications 



The same application can easily be Web- 
enabled, with complete scalability - from 
single -tier to three- tier architectures. With 
ar\ emphasis on security, 4D technologies 
are robust enough to run the US Army's 
Web servers. 




Services 



Your application can be Web services- 
enabled with a single dick. One-cJick Web 
service consumption and publishing with 
automatic code creation will have you on 
the fast track to application integration. 
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ARM Wants Safer Processors in 2004 

Extensions to RISC IP strengthen security in high-end and wireless cores 



BY EDWARD J. CORREIA 

How secure is the address book 
in your mobile phone? Not safe 
enough, according to ARM Ltd., 
which released to developers in 
late May blueprints for extend- 
ing its RISC-processor cores to 
provide hardware security to 
devices using the chips. The 
extensions, dubbed TrustZone, 
will provide a secure hardware 
partition for storing encryption 
keys or other critical data that 
will remain impervious to 
assault, the company claims. 

Though the first compatible 
ARM CPU cores are not expect- 
ed until 2004, specifications for 
TrustZone are available now. 
"This long lead time will help 
developers decide how to take 
advantage of the capabilities in 
the coming silicon and plan what 
they want to do with their appli- 
cations," said Richard York, 
ARM's secure technologies pro- 



gram manager. ARM's wireless 
and high-performance cores will 
likely be extended first, said 
York, with specific models to be 
revealed in November. Work on 
TrustZone APIs should be com- 
pleted in the next few months, 
he added. 

Mary Engels, ARM's director 
of operating systems and 
alliances, said that integrating 
security directly within the 
ARM processor core will offer 
applications more protection 
than they currently get with soft- 
ware-only solutions, and will 
eliminate the need for the 
added programming complexity 
associated with proprietary 
security coprocessors. "It will 
make [security] standard and 
pervasive across the architec- 
ture, and require one less [appli- 
cation programming] interface. 
It will also make migration 
easier when moving apps from 



one handset to another." 

York said that using sepa- 
rate circuits for security also 
can introduce the problem of 
availability. "If you're going to 
do a reasonably good job of 
supporting security on a chip 
set, the last thing you want 
is a second-source chip set, 
because that means you've got 
to rewrite a good chunk of your 
code to use it." 

York said ARM (www 
.arm.com) will implement its 
security to work with any securi- 
ty scheme, standard or propri- 
etary. "What we're trying to do is 
put in place ways of protecting 
secrets, and code that operates 
on those secrets, rather than 
putting in particular encryption 
standards. Because if you have 
the right foundations in terms of 
you build, you execute trusted 
code' on trusted data partitioned 
from the rest of the system, then 



you can implement any security 
policy and algorithm you want. 

"If you don't have hardware 
protection," York continued, 
"you're always going to be sus- 
ceptible to software attack, be it 
reprogramming memory, rogue 
applications or something that 
exploits deficiencies in the soft- 
ware structure." York asserted 
that a fundamentally secure sys- 
tem should always permit appli- 
cations to rely on key data. 
"There's an amount of code that 



you must be able to trust, and 
you want to partition it from the 
operating system," thereby pre- 
venting access to that data by 
anything other than the intend- 
ed applications. 

According to Engels, ARM's 
security extensions also will serve 
to protect data on lost equip- 
ment. "There's a secure boot 
process which ensures that 
[unauthorized users] can't boot 
the system. So you can take secu- 
rity down an additional level." I 




Extensions to ARM's processor cores set up trusted data partitions that 
developers can use for any system-critical data. 



CDC 1.1 Skips a Beat; Four Sun JSRs Rejected 



BY EDWARD J. CORREIA 

Is Sun Microsystems Inc. out of 
touch with embedded develop- 
ers? The company was rebuffed 
in late May when four of its 
own Java Specification Requests 
proposing CDC 1.1 were voted 
down by their respective exec- 
utive committees amid con- 
cerns of excessive footprint and 
changes to its licensing policy. 

The issues involve JSRs 
216 through 219, which were 
intended to blend enhance- 
ments introduced with J2SE 1.4 
into what would have been ver- 
sion CDC 1.1, the next version of 
J2ME's Connected Device Con- 
figuration and its Personal, Basis 
and Foundation profiles target- 
ing handheld computers, cell 
phones, set-top boxes and other 
resource-constrained devices. 
The specs would have required 
inclusion of the Advanced 
Graphics and UI Optional Pack- 
age detailed in JSR-209. 

According to Peter Bernard, 
vice president of marketing at 
Insignia Solutions Inc., which 
voted against the specs, intro- 
ducing these packages would 
severely impact device memory 
footprint, even if the device did 
not require the features. "Code 
size requirements had increased, 
[making] it difficult to apply 
CDC across the broad range of 



devices it's designed for. There 
were also some hard require- 
ments for building blocks that 
you had to have in there, regard- 
less if they were applicable for 
certain devices." 

The current CDC 1.0 specifi- 
cation declares that a compliant 
device be equipped with at least 
512KB ROM and 256KB RAM. 
The CDC 1.1 specs would 
require minimums of 1280KB 
ROM and 512KB RAM. 

Perhaps acknowledging a 
slight disconnect, Eric Chu, 
Sun's director of J2ME busi- 
ness and marketing, explained 
it this way: "The Java communi- 
ty crosses so many industries, 
sometimes it's hard to get every- 
thing coordinated. We've found 
that folks were concerned that 
we were bringing features that 
may not be relevant for TV 
[for example], but relevant for 
mobile enterprise." 

Chu said the next version of 
the spec also will propose an 
increase in footprint, although 
the specifics still were being 
worked out at press time. "What 
we'll do is provide more clarity 
as far as the core platform foot- 
print increase and [offer some 
parts as] optional components." 

The justification for merging 
some J2SE features into J2ME, 
he said, was to help simplify 



development across device 
types. "We're bringing CDC 
closer to J2SE because as [CDC] 
devices get bigger, it will make it 
easier for developers familiar 
with J2SE to use the same tools 
to develop mobile applications." 
There also was concern 
among developers about 
changes to licensing. But on this 
issue, according to Chu, it was 



developers that were out of 
touch. He said the change is 
reflective of JCP 2.5, the version 
of the community process adopt- 
ed in October 2002 that divorced 
licensing fees for Technology 
Compatibility Kits from Refer- 
ence Implementations. "There 
had been strong requests from 
the community to see those 
components licensed separately; 



some wanted the option not to 
license the reference implemen- 
tation as a way to lower costs." 

Revisions are part of the 
normal JCP process, Chu said, 
and in the end, the specs will 
echo the needs of the commu- 
nity, not those of Sun. "The 
final feature set will ultimately 
be decided by the expert group 
of these JSRs; they will steer it." 
Revised versions of JSRs 216 
through 219 were scheduled to 
be resubmitted before June 15, 
he added. I 



COVIGO MOBILE FRAMEWORK TARGETS .NET 



BY EDWARD J. CORREIA 

In the perfect world, developers 
would be able to deploy a single 
binary to all mobile client 
devices — without having to stan- 
dardize on a single deployment 
platform. With its target-inde- 
pendent authoring framework, 
Covigo Inc. offers a solution for 
the real world, in which even a 
small enterprise might have a 
mixture of incompatible systems. 
The company develops and 
markets a J2EE-based system 
for deploying enterprise appli- 
cations to Java and Symbian- 
based mobile devices using its 
own client runtime, called the 
Smart Client. In mid-May it 
expanded its target list with 
Smart Client .NET Edition, 
which it claims permits devel- 
opers to deploy to any device 



running Microsoft's .NET or its 
.NET Compact Framework. 

"Many enterprises don't 
have just .NET or Java, but a 
mixture," said Dav Khare, co- 
founder of Covigo (www.covigo 
.com) and vice president of 
business development. Often, 
he added, developers end up 
building the same app for many 
different operating systems. 
"We provide a single authoring 
framework to allow developers 
to build it once and deploy to 
.NET, Java or Symbian." The 
solution also includes software 
for an enterprise J2EE server 
for handling client connections 
and communications. 

Khare described the compa- 
ny's Smart Client as a 150KB 
application that presents user 
interface logic and communi- 



cates with the main J2EE back- 
end application. 

Mobile apps can be created 
using the developer's existing 
tools, Khare said, with Covi- 
go 's development environment 
adding the finishing touches. 
"You can use Eclipse or 
JBuilder for the Java logic, and 
tools like Dreamweaver and 
GoLive for presentation logic 
and templates. Then they use 
Covigo Studio to import that 
logic and add business process 
and user-direction flow" 

Smart Client .NET Edition 
is sold as part of the Covigo 
Mobility Suite for Enterprises, 
which Khare said typically costs 
about US$100,000, including 
1,000 client licenses, two devel- 
oper seats and software to run 
on an existing J2EE server. I 
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Building 

Wireless-Aware 

Applications 



BY JENNIFER DEJONG 



What happens when you take an 
existing corporate application 
and deploy it across a wireless 
network? 
If the connectivity is perfect, and if 
there's sufficient bandwidth, it will work. 
But the minute you roam out of 
range with your notebook, the applica- 
tion will get confused. It may ask you to 
reauthenticate, give you a nasty error 
message or simply freeze up. 

When that happens, said Dale Gon- 
zalez, chief technology officer at Air2- 
Web Inc., people say, "Wireless technol- 
ogy doesn't work." But in truth, he said, 
it's the application that's not fit for wire- 
less — not the other way around. 

As salespeople and other mobile 
workers rely increasingly on wireless net- 
works to connect to servers housed in the 
home office, a new reality is becoming 
clear: Using notebook 
computers in a wireless 
environment is not just 
a matter of equipping 
them with wireless net- 
work interface cards. 
To meet the growing 
demand that corporate 
enterprise applications 
behave as well in a 
wireless environment 
as they do in a plugged- 
in state, you have to 
start with a clean slate, 
rethinking and rearchitecting the appli- 
cation itself, experts agree. 

"You can't just take a connected appli- 
cation and pretend it's the right thing," 
said Scott Guthery, chief technology offi- 
cer at Mobile-Mind Inc. (www.mobile- 
mind.com), a company that develops 
consumer and vertical market enterprise 



e constraint on 



to reside locally, 
says PeerDirect's 
Johnston. 
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Deciding what 
data goes where 
is key, says Ex- 
tended Systems' 
Krishnapillai. 



applications for a range of mobile devices 
and platforms. "You have to adapt the 
application to the available bandwidth." 

Because notebooks are full-configura- 
tion computers, without the constraint on 
memory and storage 
inherent to smaller 
mobile devices, it's easy 
to assume that you 
don't need to do any- 
thing differently. "But 
as soon as you put a 
wireless card in a note- 
book, [from a develop- Processes as 
er's standpoint] it's no well as data need 
longer a notebook," said 
Air2Web's Gonzalez. 
"You have to think of it 
as a wireless device." 

Air2Web's Mobile Internet Platform 
wirelessly enables back-end apps and cor- 
porate data across multiple networks, car- 
riers and devices. 

OCCASIONALLY CONNECTED 

Wireless carriers might beg to differ, but 
in reality, a wireless connection often 
means no connection at all. Recognizing 
that fact is central to creating "wireless- 
aware" applications. 

You need to construct your applica- 
tion so that it does not depend on a con- 
nection, said Bill Jones, vice president of 
products at Synchrologic Inc., which has 
created a Mobile Suite for wireless 
access to corporate applications and data. 

"It's a different way of thinking," said 
Jones. Instead of assuming that the net- 
work connection is a given, the application 
is designed around the expectation that 
the user is connected only occasionally. 

To help developers adopt this new 
mindset, Mobile-Mind's Guthery com- 



pared the concept of designing applica- 
tions to take advantage of different types 
of connections — high-speed, medium- 
speed, low-speed or no connection at 
all — to the idea of architecting applica- 
tions to take advantage of various types 
of memory. "Developers are accustomed 
to thinking that way," he said. 

MOVE DOWN THE DATA 

Understanding that you can "no longer 
assume persistence in one session" gov- 
erns how the application developer han- 
dles a whole host of issues, said Senthil 
Krishnapillai, senior technical product 
manager at Extended Systems, which 
sells mobile data and connectivity man- 
agement products. One key decision is 
what data goes where. "You want to 
move as much data as possible to a local 
store," he said. 

"Although the [wireless-aware] appli- 
cation can look the same as it would on a 
desktop, the underlying database is resi- 
dent locally, instead of [residing on] a 
shared server," added Jones. 

He emphasized the need to segment 
the data intelligently. "Let's say I am one 
of 100 salespeople. The entire sales 
database is 500MB, but the slice I need 
is 10MB. So I carry around 10MB on my 
notebook." 

The dramatic increase in notebook 
storage technology over the past few 
years — the notion that an individual hard 
drive can hold a significant amount of 
business data — is a key driver in enabling 
companies to deploy enterprise applica- 
tions wirelessly, said Britt Johnston, chief 
technology officer at PeerDirect Corp., 
which sells database replication and 
application replication products. 

Johnston stressed that it's not just data 




that needs to reside locally. To decrease 
dependence on the centralized server, 
you must provide users with the ability to 
carry out business processes locally. For 
example, a salesperson needs to be able 
to create a new account without having 
to connect to the server, he said. 

GETTING IN SYNC 

Moving data down to the notebook is a 
step in the right direction. But at the 
heart of getting any corporate applica- 
tion to work well wirelessly is figuring 
out an effective way for wireless users 
to synchronize with the server at the 
home office. "In the wired world, you 
want to push as much data down the 
wire as you can," said Air2Web's Gon- 
zalez. "But with wireless, you have to 
make the time spent using the network 
as short as possible." 
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The key is to minimize the amount of 
data that is exchanged, downloading or 
uploading only the data that has changed 
since the last time you connected, said 
Marty Mallick, wireless evangelist at 
iAnywhere Solutions Inc., a subsidiary of 
Sybase Inc. "In a wireless environment, 
you don't want to download [or upload] 
large amounts of data." 

iAnywhere's m-Business Platform, 
which extends corporate applications to 
wireless devices, includes SQL Anywhere 
Studio, m-Business Studio, Manage Any- 
where Studio and Mail Anywhere Studio. 

Synchrologic's Jones referred to this 
minimal exchange of data as a "field-lev- 
el capture," where only those fields that 
have changed — for example, the fax 
number in a customer record — are 
uploaded. "You have to work on a gran- 
ular level," he said. 



"You have to define transactions with 
the back end as granularly as possible, 
breaking down each message [which can 
be a transaction] into, say, 10 small pack- 
ets," added Gonzalez. 

The idea is that each packet repre- 
sents a complete step in the synchroniza- 
tion process, and the next packet simply 
remains at the top of the queue until the 
user is able to connect again, he said. 

To make that work, the data structure 
itself must be able to be packaged, said 
Gonzalez. Inevitably, because customer 
records for wired applications typically 
aren't designed to be read individually, 
that will mean duplicating some data. 

For example, he explained, say you 
have a sales order that is associated with 
customer 7664. In order to determine 
that customer 7664 is Boeing Corp., you 
have to fetch the customer name from a 



MOST PRODUCT OFFERINGS 
TARGET SYNCHRONIZATION 




The majority of the mobile software 
offerings focus on implementing the 
synchronization process — the central 
piece that manages how the wireless 
application interacts with the central 
server. Some vendors also sell soft- 
ware geared to specific business func- 
tions, such as sales, and offer mobile 
management capabilities as well. 
Among the offerings: 

Air2Web Inc. (www.air2web.com) 
Air2Web's Mobile Internet Platform sup- 
ports transactions, through an XML- 
based infrastructure, with any corporate 
data source, including EAI, ERP and CRM 
applications. You can license the software 
or engage Air2Web to host the applica- 
tion for you. 

Extended Systems 

(www.extendedsystems.com) 
At the core of Extended Systems' 
mobile software offerings is the XTND- 
Connect Server, which interacts with 
mobile applications to transfer and 
receive data. It also sells Mobile Enter- 
prise Applications, which includes busi- 
ness solutions, for sales, field service 
and pharmaceuticals. 

iAnywhere Solutions Inc. 

(www.ianywhere.com) 
Best known for SQLAnywhere Studio, 
which manages the data synchroniza- 
tion process, this Sybase subsidiary 
also offers the m-Business Platform, 

separate record. But you don't want to 
do that with a wireless application. "The 
database purists will howl: 'You are 
duplicating data!' and, of course, they 
are right," said Gonzalez. 

When the mobile user is connected, 
the application also needs to make the 
most of that connection, distributing only 
information that is highly relevant to that 
particular user, said Eric Newcomer, chief 
technology officer at Iona Technologies. 

Among other products, Iona sells 
Mobile Orchestrator, which uses Web 
services to interact with occasionally con- 
nected users of enterprise applications. 

One way to take advantage of the 
connection is to use the publish/sub- 
scribe model, where the server automat- 
ically downloads relevant data in the 
background. For instance, a salesperson 
would subscribe to all information on 
new products, said Newcomer, ensuring 
that his information is current when he 
calls on a customer. 

STORE AND FORWARD 

Newcomer said that the most significant 
aspect of deploying corporate enter- 
prise applications wirelessly is the 
change in the communication paradigm 



which extends enterprise applications 
to mobile devices, including laptops. 

Iona Technologies (www.iona.com) 

lona's Java-based Mobile Orchestrator 
uses a Web services approach to 
enabling data transfer and managing 
the connection between mobile users 
and corporate data and applications. 

NetMotionWireless Inc. 

(www.netmotionwireless.com) 
NetMotion Mobility enables mobile 
users to maintain a wireless connection, 
holding the application in suspension, 
when they move between networks and 
coverage gaps. It also manages the 
authentication process. 

PeerDirect Corp. (www.peerdirect.com) 
PeerDirect's database replication and 
application replication products, in- 
cluding PeerDirect InnerEdge Server 
and PeerDirect OuterEdge Server, 
enable companies to distribute busi- 
ness applications across the enter- 
prise, including wireless users. 

Synchrologic Inc. 

(www.synchrologic.com) 
Synchrologic's Mobile Suite is an inte- 
grated set of components designed to 
address all aspects of wireless applica- 
tions, including synchronization and 
e-mail, as well as systems management 
of mobile devices and laptops. 

-Jennifer deJong 

used to synchronize with the server. "In 
the development world, people are used 
to RPC-oriented (Remote Procedure 
Call) technology," he said. But RPC 
presents significant hurdles for occa- 
sionally connected computing. "Instead 
of writing code to synchronize with the 
server, you use the store-and-forward 
model, which is a doc- 
ument-oriented inter- 
action style," he said. 

Microsoft sees that 

process — mobile app- 

I lications exchanging 

^L I documents with the 

^™ ^^^ sewer — as a return to 

Construct apps the "smart client" and a 

so they don't move away from the 

rely on a connec- Web browser, said Mike 

tion, says Synch- Kass, a product manag- 

rologic's Jones, er in Microsoft Corp.'s 

developer division. 

"In the old scenario, you made a 

request to the server and the data is sent 

back as HTML," said Kass. But in the 

new model, you get the information 

back as an XML document, which the 

local application can open and display. 

With the richer client, you are 

► continued on page 22 
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< continued from page 21 

essentially distributing part of 
the business process, added 
Newcomer. 

GETTING USERS TO BEHAVE 

A wireless-aware application 
knows what its users are up 



against and communicates with 
them accordingly. "It's impor- 
tant to show the mobile user 
some form of application sta- 
tus," said i Anywhere s Mallick. 

For example, you can use a 
status bar to show how the 
synchronization process is pro- 
gressing. Since wireless com- 
munication is typically slower, 



you cannot simply rely on 
the user interface of a wired 
application to keep users 
informed. "In a wired envi- 
ronment, the hourglass is 
onscreen for, say, a few sec- 
onds," said Mallick. But in the 
wireless scenario, it might 
remain there as long as six 
minutes. The user would 



probably shut down the appli- 
cation, he said. 

Another issue to address: 
making sure that users can 
upload only critical informa- 
tion over a wireless connec- 
tion. This is mostly a matter of 
keeping costs under control. 
"Do you want them e-mailing 
huge PowerPoint apps over a 
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CDPD network?" asked Shelly 
Julien, vice president of strate- 
gic communications at Net- 
Motion Wireless Inc., whose 
NetMotion Mobility product 
enables wireless users to main- 
tain connections and access to 
data when moving among dif- 
ferent networks or between 
coverage gaps. 

"Every byte you send is 
metered," added Extended 
Systems' Krishnapillai. He 
predicted that the unlimited- 
usage plans some carriers cur- 
rently offer won't last. "They 
don't have unlimited wireless 
capacity." 

DEVELOPING BASED ON COST 

Factoring communication costs 
into the equation is a new thing 
for developers to deal with, 
said Mobile-Mind's Guthery. 
To avoid users uploading non- 
critical data via a costly wire- 
less connection, you can build 
a usage policy into the appli- 
cation, based on criteria, such 
as how much the line costs, 
he said. 

The application needs to be 
able to determine what kind of 
connection the user is coming 
in on, said Mallick. "If it's wire- 
less, [you can set a policy that 
says] only priority synchro- 
nization is allowed," he said. 
The application can display a 
message that says: "Please do a 
full synchronization back in 
the office." This will keep traf- 
fic from slowing down on the 
wireless connection and help 
to keep costs under control. 

It also makes sense to defer 
activities, such as backups and 
software upgrades, until the 
user is in a high-bandwidth 
environment, said Krishnapil- 
lai, emphasizing that it is 
important for wireless applica- 
tions to also incorporate mobile 
management capabilities. 

What happens, though, 
when the business need is 
critical, but you can't get any 
connection at all? Say, for 
example, you are with a cus- 
tomer and you need access to 
current inventory data in 
order to close a sale. "The 
application should display the 
message: 'You are not con- 
nected, make a phone call,'" 
said PeerDirect's Johnston. 

Alternatively, said Guthery, 
the application could send a 
text message to the user's cell 
phone. "The user is carrying 
multiple devices, and your 
application should be able to 
communicate with all of them," 
he said. I 
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Who: Matt Sivertson 
What: Wheel of Fortune & Jeopardy 
Where: This is wireless - there is no 'where' 
Why: Th e fu tu re a Iways arrives 
earlier than you'd expect 




Matt Srvertson is a developer working for Sony Online Entertainment He's the brains behind both Wheel of Fortune and Jeopardy - two cool 
BREW™ applications wireless users can download and play whenever they want. Like Srvertson, more and more developers are recognizing 
the rewards of the BREW solution. "TTiere's a huge untapped market out there," he says. "And BREW has the ^- 
carrier support to get my tecrniology into the hands of those people." Commercial services are launched and v^D< 
URFW applications are bitting the market. And they're bitting the market now. Games and entertainment, T7> 
messaging and email, news, weather, sports, stock trades, posiiion location, ringers... you name it. 1 1 you aren't DTSW. 
developing for BREW, you aren't developing to your potential. To get started, visit www.qualconrim.com/brew/sdt. c^^\it. p^uhk. Hwirw? 
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EDITORIALS 

The Process Is Working 

There's no question that Sun controls the Java Com- 
munity Process. Sun is the only vendor to have a veto; 
no Java Service Request can be approved without Sun's 
blessing. Membership in the Java Community Process 
takes the form of a contract between Sun and a prospec- 
tive member; Sun has the right to choose to exclude any- 
one from the JCP Further, Sun controls all Java trade- 
mark licensing. 

A brief look through our business-card file confirms 
that Sun is in charge: Every JCP official, from chairman 
Rob Gingell to director Otto Kluyt, are Sun employees. 
It's assured that the JCP's actions will be 100 percent in 
sync with Sun's corporate goals. 

Yet Sun has proven itself to be a reasonably benevolent 
dictator of the evolving process — almost a constitutional 
monarch. 

While the company does have veto power, it can't force 
through changes to the Java tech specs — or to the Java 
Community Process itself — without approval by some of 
its harshest competitors. As evidenced by the recent fail- 
ure of several Sun-sponsored initiatives, and by Sun's 
underwhelming share of the commercial Java software 
market, the process does appear to be working reasonably 
well. In other words, the only power Sun truly has is the 
power to say no. 

Sun deserves credit for continuing to liberalize the Java 
Community Process. As big vendor consortia go, the JCP 
is remarkably open and transparent. It's not perfect, but 
its critics might do well to compare and contrast the JCP 
with, for example, the .NET Community Process. 

SCO Opera 

SCO's claims that Linux violates its intellectual proper- 
ty rights, and that IBM has breached its Unix licensing 
terms, must be settled in the court of law. But SCO's tac- 
tic of fighting the battle in the court of public opinion is 
little short of bizarre. 

The accusations and counteraccusations are flying 
faster than a bludger at a Quidditch match. But even Har- 
ry Potter has something to point his wand at: SCO's 
refusal to present any evidence to back up its claims — a 
single line of purloined source code, a single Linux usage 
of proprietary class libraries or architecture that only a 
Unix licensee would know about — is disturbing. 

SCO has claimed that it can't release such details due 
to its pending lawsuit against IBM. How convenient. But 
in that case, shouldn't Darl McBride hold off in sending 
vaguely threatening letters to commercial Linux users for 
the same reason? 

Perhaps SCO is right, that members of the Linux 
community have unfairly appropriated its intellectual 
property, and that IBM has violated its original AT&T 
Unix contract terms by redirecting sales away from 
Unix. Perhaps IBM is right in its response that the law- 
suit is frivolous. Perhaps Novell is right in its rebuttal 
that it, not SCO, actually owns the Unix patents and 
copyrights. 

Ultimately, that's for the courts of law to decide. 

But without providing any clear evidence to substanti- 
ate its claims, SCO will lose in the court of public opinion 
long before any judge bangs the gavel. I 



GUEST VIEW 



SECURITY REQUIRES QUALITY COMPONENTS 



Everyone is worried about 
security these days, but 
problems with software securi- 
ty, both corporate and nation- 
al, may be the best things that 
ever happened to software 
engineering, according to 
Bertrand Meyer, a keynote 
speaker at the recent Interna- 
tional Conference in Software 
Engineering, held in Portland, 
Ore., in early May. The search 
for security may be just the 
incentive needed for the 
industry to finally produce the 
quality of core components 
required for successful com- 
ponent-based development on 
a broad scale. 

Software managers may 
have been in the minority 
among the 600-odd educators, 
researchers, students and 
practitioners gathered in Port- 
land for the 25th ICSE, but 
the conference, with its focus 
on the foundations and fron- 
tiers of software engineering 
practice, was solidly anchored 



f 



in real-world economics and 
practical trade-offs. Indeed, 
the industry hot buttons of 
security, component-based 
development and software 
quality highlighted in Meyer's 
keynote were recurrent sub- 
texts throughout many presen- 
tations at ICSE 2003. 

Meyer, a professor of 
software engineering at 
ETH (Swiss Federal 
Institute of Technology), 
may be best known as 
the inventor of the Eiffel 
object-oriented pro- 
gramming language. He 
argued that the increas- 
ing drain on resources 
from worms, viruses and Trojan 
horses combined with the threat 
of software terrorism provide 
sufficiently strong economic 
justification for building better 
reusable components out of 
which stable, secure, depend- 
able software can be construct- 
ed. Meyer admitted to a certain 
amount of Schadenfreude at the 
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prospect that security threats 
may finally redeem program- 
ming practices that have long 
been undervalued and under- 
utilized. 

SCALING UP 

"Reuse scales up everything," 
Meyer said, including ineffi- 
ciencies and the risks 
arising from deficient 
design. Bad basic com- 
ponents become a 
major business risk. 
With reusable compo- 
nents, the economics 
change because the cost 
of guaranteed security 
and stability is spread 
over many applications, justify- 
ing obsessive attention to detail 
and highly systematic construc- 
tion methods needed to con- 
struct quality components. 

Of course, developers and 
managers on the ground have 
been hearing the reuse drums 
beaten without rest for at least 
the past decade, with increas- 



LETTERS TO THE EDITOR 



UBL BRINGS HARMONY 

Your article ["OASIS Proposes 
Standard for Business Docu- 
ments," May 15, page 1, or at 
www.sdtimes.com/news/078 
/story3.htm] misses the point. 

The value of UBL is not in 
the collection of horizontal 
documents such as order and 
invoice. The value is in the 
naming and design rules 
methodology that is harmo- 
nized with UN/CEFACT core 
components. OAG, xCBL, 
RosettaNet and many other 
horizontal and vertical stan- 
dards are also moving toward 
harmonization of core compo- 
nents. 

The difficulty in cross-indus- 
try collaboration is not whether 
the document is this format or 
that (syntax issue) — the real 
problem is in the meaning of 
the content (semantic issue). 
Harmonization of semantics 
through efforts such as UN/ 
CEFACT core components 
(and the W3C "semantic web" 
for that matter) is the key to 
interoperability. UBL provides 
by far the best example of a 
message construction method- 
ology that leads to improved 
semantic interoperability. 

If all the different industry 
standards kept their libraries of 



business messages but used the 
UBL naming and design rules 
as a "reference implementa- 
tion" as they move toward har- 
monisation of the components 
(building blocks such as an 
[address] element), then UBL 
will have been an outstanding 
success. 

Steve Capell 

RedWahoo 

Sydney, Australia 

I have read your article "OASIS 
Proposes Standard for Business 
Documents," and I have found it 
disgusting. You claim that 
Esperanto is "a language in- 
vented for cross-cultural com- 
munication that never has 
gained wide adoption." That isn't 
true: There are people all over 
the world speaking Esperanto, 
even as a mother language (they 
are called "denaska"). Also, the 
European Community is con- 
sidering the adoption of Esper- 
anto, or other conlang, as a neu- 
tral language. 

Anyway, ebXML is a lan- 
guage for computers, not for 
people: You cannot pronounce 
something like this: < bean: write 
name = "user" property ="name"/> . 

Please verify your sources 
and retract your statement. 

Jose Manuel Garcia Rivas 



I am an Esperantist living in 
Harare, Zimbabwe, where we 
have an Esperanto club. I hap- 
pened to visit your Web site at 
the linkwww.sdtimes.com/news 
/078/story3.htm and was delight- 
ed about the story. 

I am writing to inform you 
that even in Africa, Esperanto is 
now being used as a language 
for communication among the 
Esperantists. 

One of our members recent- 
ly visited Ghana where he went 
to attend a two-week workshop, 
and even there he could still 
use Esperanto with the Esper- 
antists he met. 

That was not a surprise for 
him because Esperanto is not 
as dead as non-Esperantists 
believe. We use it on a daily 
basis on the Internet and in our 
local club or at different meet- 
ings and gatherings. 

The number of students in 
our local club is increasing, 
which is another fact that 
proves that Esperanto is alive. 

Of course obstacles are 
there, such as poverty in Africa 
and a lack of sufficient funds, 
but we believe that one day, 
with the collaboration of orga- 
nizations such as SD Times 
and others, Esperanto will be 
among the leading internation- 
al languages. 

Kapinga Ntumba 
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ing emphasis on component 
technologies — such as COM, 
CORBA, J2EE and .NET— 
but little attention to the qual- 
ity of components built using 
these technologies. 

Meyer thinks the times may 
be changing. For one thing, we 
have well-proven software engi- 
neering techniques for creating 
robust reusable components 
with predictable performance 
and guaranteed reliability. 

Indeed, many of the failures 
with reusable objects and com- 
ponent-based development can 
be traced to a failure to use 
available approaches as well as 
to a lack of willingness on the 
part of management to make 
the upfront investment needed 
to produce good components. 
The economics shift when 
security becomes a driving con- 
cern. Companies will invest in 
security where they would not 
invest in reducing bugs. 

Microsoft's Trustworthy 
Computing initiative, with its 
focus on security, might be con- 
sidered a case in point. Service 
Packs are touted as fixes for 
security problems, not correc- 



tions of bugs. 

In a 1995 interview (www 
.cantrip.org/nobugs.html), for 
example, Bill Gates set the 
record straight, explaining that 
the rationale for new releases 
and updates "is not to fix bugs. 
...[In] no sense is stability a 
reason to move to a new ver- 
sion." Perhaps Gates was right. 
Managers who tolerate tremen- 
dous day-to-day inefficiencies 
from bug-ridden system and 
application software are moved 
to take action when corporate 
security is threatened. 

The bottom line is that 
many security problems are 
relatively easily overcome with 
better attention to basic pro- 
gramming practice. As Meyer 
pointed out, most current 
attacks exploit buffer overflow 
or other trivial issues that are 
readily solved with more disci- 
plined programming. 

WE HAVE THE TECHNOLOGY 

Meyer highlighted an array of 
proven technologies and tech- 
niques, including the design- 
by-contract approach he pio- 
neered. He sees a number of 



contemporary practices with 
real potential payoff in the 
search for security and stability. 
He cited the open-source 
movement for releasing a 
tremendous surge of energy 
and enthusiasm, but questioned 
one of it central tenets — that 
enough eyes on the code guar- 
antees quality. 

Meyer praised Extreme Pro- 
gramming for having "rehabili- 
tated the act of programming" 
and for its emphasis on preven- 
tion and early elimination of 
defects, but questioned whether 
all its prescriptions were equally 
useful. He particularly chal- 
lenged the notion of tests as 
specifications and told of a com- 
pany that ended up having to 
pay for contracted software that 
passed all 15 tests stipulated in 
the contract — yet did little else. 

Meyer also drew attention to 
progress in formal methods. 
Long regarded as only of acad- 
emic interest, approaches such 
as Abstract State Machines or B 
are becoming more practical 
and more readily scaled up, 
although they remain relatively 
expensive. 



FORMULA 1 

In Meyer's view, component 
design should become the 
"Formula 1 racing" of software 
engineering, a discipline within 
which perfectionism is seen as 
a virtue and "good enough" 
software is recognized as not 
good enough. 

Component-based develop- 
ment, properly practiced, 
offers software developers the 
potential of guaranteed quali- 
ty, faster time-to-market, ease 
of maintenance, standardized 
programming practices, and 
the preservation of hard-won 
know-how. 

He outlined both a "low 
road" to core components 
based on certified quality, and a 
"high road" built on formal 
methods and proofs of correct- 
ness, with the high road most 
needed — and most economical- 
ly practical — in operating sys- 
tems and other core software. 
We all can hope the software 
vendors get the message. I 

Computer-usability expert Larry 
Constantine is chief scientist at 
Constantine & Lockwood Ltd. 



STOP THE WHINING 

This is my first time writing, 
and I wanted to apologize for it 
being a negative comment. I 
have read SD Times for a little 
over a year now and seen the 
"Microsoft vs. the world" 
theme in the Java Watch col- 
umn. I honestly and truly 
believe in open competition 
and freedom of choice for the 
consumer. I also appreciate 
that every time another com- 
pany does something great, 
Microsoft has to either match it 
or beat it. This could be from 
anything from the Macintosh 
OS to Java language. 

However, I grow tired of the 
Java camps whining about the 
JVM and especially Microsoft's 
JVM. In his column ["Dump 
Microsoft's JVM" May 15, page 
31, or at www.sdtimes.com/cols 
/j avawatch_078.htm], Steven J. 
Vaughan-Nichols states that 
Microsoft did not initially ship 
a Java JVM and then they 
shipped an outdated one. He 
writes, "Isn't it time to stop 
Microsoft from getting away 
with this?" 

What exactly are they get- 
ting away with? If I could 
either go to the grocery store 
that was really close and the 
fruit was 12 days old and 
cheap, or drive across town 
and get freshly picked fruit, 



what would I do? It depends. I 
have a choice, and so do con- 
sumers. As a user of HP's 
Insight Manager, it prompts 
me to install Sun's JVM. I do, 
and I move on. That is a choice 
I make. Each consumer can 
go to Sun's Web site and 
download the newest JVM if 
they — and here is the key 
word — want. Is it a burden to 
download it over a 56kbps con- 
nection? Probably. But if they 
want it bad enough, there it is. 
It may be inconvenient, but it is 
not impossible to get at. 

Steven should concentrate 
on stating the benefits of tak- 
ing that inconvenient road. 
His article points out the huge 
security holes in Microsoft's 
version. It's not safe to use. It's 
kind of like buying an old car 
without airbags and seatbelts. 
(Note: You can still buy it if 
you wish — again, consumer 
choice). 

By the way, HP does exactly 
what he says: You are prompt- 
ed to install the newer JVM to 
use Insight Manager. So yes, if 
I buy a program written in Java 
and need to update my JVM, 
so be it. That's a condition of 
running the program, just like 
running VB6 apps required 
installing the VB runtime. 

Steven should stop insulting 
our intelligence. I grow weary 



of all these claims of how hard 
it is to get a Java VM and how 
bad Microsoft is by not writing 
a new one. Why should they 
waste their time writing what 
the creators of Java already 
have as a free download? 
David W. Steyer 

The Java community should 
have taken the actions suggested 
at the end of Steven J. Vaughan- 
Nichols' "Dump Microsoft's 
JVM" column years ago. 

Upgrade detection and dis- 
tribution via CD or Web is a 
simple process every vendor 
seems to have mastered 6-10 
years ago, including games 
manufacturers. No other ven- 
dor group expects Microsoft to 
do product update detection 
and distribution for them. Nor, 
as far as I know, has there ever 
been a problem installing Sun's 
JVM onto Microsoft operating 
systems due to Microsoft prod- 
ucts. Unlike some silly federal 
courts, I can't believe anyone 
could reasonably hold the view 
that Microsoft is failing in its 
responsibility to distribute 
Sun's latest software. In a sane 
world, it simply isn't Micro- 
soft's duty to market and dis- 
tribute Sun's products just 
because Sun seems incompetent 
in that area. It is time for Java to 
stand on its own two feet. I am 



glad to see the Java community 
realizing that Microsoft is not an 
essential part of the distribution 
chain for Java. 

Clay Falter 

LAN Administrator 

Streck Laboratories 

CORRECTIONS 

CollabNet Inc.'s SourceCast is a 
collaborative software develop- 
ment tool. It is not open source. 
A description of the tool was 
incorrect in the June 1 issue's 
SD Times 100 awards. 

QNX Momentics, a bundling of 
the company's Neutrino real- 
time operating system and 
development tools, was mis- 
spelled in the SD Times 100 
awards that appeared in the 
June 1 issue. 



WHAT DO YOU THINK? 

SD Times welcomes feedback. 
Letters should include the 
writer's name, company affili- 
ation and contact information. 
Letters become the property 
of BZ Media and may be edit- 
ed for space and style. 

Send your thoughts to 
feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please 
mark all correspondence as 
Letters to the Editor. 
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MOBILITY MIDDLEWARE 



While IT spending continues to lan- 
guish, pockets of technology are 
actively enjoying increased investment. 
The most evident hot spot is wireless 
connectivity Wi-Fi is quickly becoming 
an integral part of client-side endpoints. 
Intel's Centrino platform includes 
802.11b connectivity. And Centrino's 
energy-miser processor, the Pentium M, 
will push this wireless technology into 
most new notebooks. High-end PDAs 
also come with built-in Wi-Fi capability. 
So much is happening that customers 
are already restless with the perfor- 
mance limitations of 802.11b and are 
anxious to get hot spots moved to 
802.11a or 802. llg. Which standard will 
win out is very much an open question, 
although llg appears to have momen- 
tum. Both 11a and llg offer the same 
54Mbit/sec bandwidth, but llg is back- 
ward-compatible with lib as both ver- 
sions use the same protocols and 
2.4GHz radio band. The 11a spec runs 
at 5GHz, which does offer some advan- 
tages: It avoids the problems of interfer- 
ence from Bluetooth and cordless 
phones, which also run at 2.4GHz. In 
addition, lla's spectrum supports 12 
non-overlapping channels, whereas lib 
supports only three — which could have 
scalability implications for the enter- 
prise. But Hg's crucial compatibility with 



lib suggests that hot spots may favor it. 
While the hardware advances push wire- 
less technology out to clients, only scant 
software to accommodate a client's 
needs has yet appeared. As I explained 
back in my column of March 1 ("Design 
With Mobile Problems in Mind," page 
31, or at www.sdtimes.com/cols/middle 
watch_073.htm), Wi-Fi presents several 
key challenges due to intermit- 
tent connectivity: preserving 
state, syncing data and transac- 
tions at reconnect, handling user 
actions arising from disconnects, 
and, of course, security. 

One of the first companies to 
attempt to provide a solution 
was Kenamea, a firm co-found- 
ed by Bob Pasker, the architect 
who designed the Web Logic application 
server. Pasker's vision was a message- 
passing server that spoke to a small 
applet on the client endpoint. This com- 
munication transparently handled appli- 
cation communication issues such as 
syncing after disconnects, security and 
so forth. However, Pasker cut back his 
participation in Kenamea, and the com- 
pany is positioning itself as a provider of 
Web services and messaging solutions, 
rather than focusing specifically on the 
needs of mobile client endpoints. 

A company addressing the unique 
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problems of wireless connectivity head- 
on is Nexaweb Technologies in Cam- 
bridge, Mass. Its software manages appli- 
cation-level communication between 
client and server. It handles the problem 
of re-syncing after a disconnect via mes- 
sage queues, de-duplicating repeated 
messages (such as when a PDA user 
keeps clicking on "Send" unaware the 
Wi-Fi connection is down), and pushing 
selected information to the client. This 
last capability enables applications to 
automatically update a client 
screen, without forcing the user 
to poll the server. This capability 
is particularly important in com- 
mercial applications, such as 
Nexaweb s installation at the 
Starwood Hotel chain, where it's 
used on roving PDAs to handle 
customer requests and com- 
plaints. Its fundamental opera- 
done through constant syncing 
a client side applet and a Java 



tion is 
between 

servlet that resides on any J2EE plat- 
form. The client endpoint needs only a 
standard browser to work. When the 
client logs in to the application, it auto- 
matically downloads a 130KB applet, if it 
doesn't already have it installed. This 
applet manages the application security, 
data transfers and synchronization. 

One of Nexaweb s nifty innovations 
is how it implements a key principle 
of occasionally connected computing, 
namely that solutions must scale up or 



down to fit the endpoint capabilities. 
Nexaweb ascertains endpoint capability 
at start-up. The more robust the client 
hardware, the more functionality it 
pushes on to the client. PDAs perform 
less work locally than Pentium 4-based 
notebooks. Whatever functionality is not 
pushed to the client is performed by the 
server. And the server keeps track of 
what functionality exists at each end- 
point. The result is that client interac- 
tion is always responsive. At its lowest 
bandwidth level, Nexaweb simply sends 
a message (in XML) to the client saying 
it needs to update a data item. 

The client applet runs on any Java 
runtime since the prehistoric 1.1.4, and 
it supports XUL, XForms and SVG, in 
addition to XML. XUL (pronounced 
zool) is a standardized means of describ- 
ing user interface layouts with an XML- 
style syntax; XForms is a W3C specifica- 
tion for dynamic Web forms; and SVG, 
of course, is the standard for images. 

Kenamea and Nexaweb are pioneers 
today. But as wireless Ethernet connec- 
tivity becomes pervasive, platform- 
agnostic mobility middleware that can 
scale with the endpoint and handle 
most of the application issues seamless- 
ly will become increasingly important 
and common. Expect to see more of it 
in the future. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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SUMMER READING, .NET STYLE 



Ah, summer. That joyous season of 
lemonade, suntan lotion and read- 
ing lists. With the .NET Framework 
maturing steadily and Windows Server 
2003 shipping, it's an excellent time to 
increase the depth of your understand- 
ing of these milestone products, and 
what more enjoyable way to do so than 
by lugging a few dozen pounds of bound 
paper to the beach? 

There are several books whose quali- 
ty distinguishes them from the pack and 
certainly are worth your attention. A 
prime example is Fritz Onions "Essen- 
tial ASP.NET" There are actually two 
books with this title: one with examples 
in C# and one with examples in VB.NET 

Amazingly, these books are identical 
outside of the code listings. This is an 
eloquent testimony to the capabilities of 
.NET's Common Language Runtime; 
one's preferred language no longer 
channels one into a particular type of 
application development; rather, the 
unified concepts and techniques allow 
programmers to tackle any type of 
development in which they're interest- 
ed. Conversely, it allows excellent writ- 
ing such as Onion's to find the largest 
possible audience. 

The first 32 pages of "Essential 
ASP.NET" are the clearest explanation 
of AS P. NET's architecture that I've 
read; it allowed me to clear my book- 
shelves of a couple of hefty competitors 



on that basis alone. It's become evident 
that many people are moving to 
ASP.NET without understanding its ele- 
gant architecture or even the object- 
oriented structure of "code behind." 

ASP.NET is an enormous improve- 
ment upon ASP and architecturally 
leapfrogs competitive server-pages tech- 
nologies, but only if people use it as 
more than "ASP with objects." 
Onion's book covers the archi- 
tecture thoroughly and concise- 
ly (the book is a relatively slim 
400 pages). Web Forms, config- 
uration, validation and data 
binding are the predictable fun- 
damentals, but Onion also gives 
good coverage to such topics 
as diagnostics and debugging, 
writing custom controls, security, the 
HTTP pipeline and caching. 

Not only is "Essential ASP.NET with 
examples in C#" so good that it's the only 
ASP.NET book on my working bookshelf, 
it's so good that "Essential ASP.NET with 
examples in Visual Basic" is the only 
ASP.NET book on my secondary refer- 
ence bookshelf in the garage! 

Onion's book is from Addison- Wes- 
ley's .NET Development series, which is 
being edited by the trustworthy Martin 
Heller. The series is shaping up well, 
with Shawn Wildermuth's "Pragmatic 
ADO.NET" and Don Box and Chris 
Sells' "Essential .NET" also being stand- 
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out works. Books in the series have 
white covers with a checkerboard back- 
ground and should be among the first 
you pluck from the shelf when looking 
for an answer. 

Another series on .NET develop- 
ment that is shaping up with consistent- 
ly high quality comprises the books with 
the orange-and-black covers from 
Microsoft Press. Jeffrey Richter's 
"Applied .NET Framework Program- 
ming" is the most value-laden book on 
the platform to date: It is filled 
with accurate and concise expla- 
nations of such important topics 
as shared assemblies, garbage 
collection and AppDomains. 

You don't turn to Richter to 
understand "Hello, World." You 
turn to Richter for sections that 
begin with lines like "If a client 
makes a request of the server and 
the server code throws an exception, the 
exception can be marshaled back to the 
client and rethrown in the client's thread." 
Regular readers of this column know 
that I believe the great opportunities of 
the next decade lie in developing soft- 
ware for mobile devices: phones, PDAs 
and Tablet PCs. If you're interested in 
these areas, Microsoft Press is going to 
be just about your only choice for a ref- 
erence book, but the good news is that 
both "Microsoft .NET Compact Frame- 
work Core Reference" by Andy Wigley 
and Stephen Wheelwright and "Build- 
ing Tablet PC Applications" by Rob Jar- 
rett and Philip Su go beyond the SDK 



documentation and provide real insight 
into the challenges of developing 
mobile software. 

In particular, the Wigley and Wheel- 
wright book has an excellent chapter on 
interacting with native code that will 
certainly justify in time savings the pur- 
chase price of the book and more — it's 
one of the few technical discussions I've 
read recently that vastly outstrips what 
can be Googled, not just in consistency 
of tone and presentation, but at the 
technical level. 

Moving beyond .NET-specific titles, 
if you haven't read Martin Fowler's "Pat- 
terns of Enterprise Application Archi- 
tecture" or Kent Beck's "Test-Driven 
Development," I urge you to do so. 
These are my two favorite books of 
2002. Fowler's book serves as a pragmat- 
ic pattern catalog, complete with trade- 
offs and implementation examples 
(albeit mostly in Java), while the value of 
Beck's book is that it is essentially a tuto- 
rial in test-first programming, the most 
important contribution to programmer 
productivity in years. 

Finally, for that day or two when you 
allow your mind to drift, just for a 
moment, from things technical, check out 
Carl Hiaasen's "Basket Case," now avail- 
able in paperback. Well, anything by Carl 
Hiaasen, actually. The guy's a hoot. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 



A JAVAONE FOCUS 



Sun Microsystems Inc. and confer- 
ence producer Key3Media Group 
Inc. tell me that mid- June's JavaOne was 
to have three themes: innovation, Web 
services and mobility. OK, fair enough. 

First innovation, if I may take up a 
purely technical cause for a moment. I 
know they're old-fashioned, and if James 
Gosling had really, really wanted them in 
Java, we'd have them, but on behalf of 
developers everywhere, could we please, 
please have user-defined enumerated 
types — enums — in Java? 

Enums are used to "enumerate" all 
possible values for an enum variable. For 
example, the enum "month" might have 
the values of Jan, Feb, Mar and so on. It 
can really make programming, as C + + 
developers can attest, much easier. But, 
enums aren't in Java, and the two most 
popular workarounds both have prob- 
lems. Technical issues may not matter to 
you as a manager, but the bottom line is 
that Java programming would go a bit 
faster with fewer problems if only the 
language had enums in its bag of tricks. 

Speaking of innovation, could we final- 
ly get some honest agreement on Eclipse? 
Forget about the politics of who really 
controls Java. Forget about the politics of 
Java controlling everything in its environ- 
ment. It makes perfect sense to me to let 



Java use native graphic interfaces to boost 
performance. Language purity is all well 
and good, but no one is forcing developers 
to use Eclipse. Sun: Adopt SWT as a legit- 
imate alternative to AWT and Swing, and 
let's move on, shall we? 

And here's another "innovation" I'd 
like to see at JavaOne: Would Sun, BEA, 
IBM and everyone else not spend quite 
so much time sniping at each 
other? Wouldn't it be nice if the 
focus of JavaOne were on Java 
instead of who's No. 1? 

It would help if Sun put a lit- 
tle more focus on Java at the 
show, rather than on its own 
solutions. Sun, once you get right 
down to it, is a hardware compa- 
ny. It makes its money from serv- 
er sales, not operating systems, and cer- 
tainly not from Java. It doesn't have to be 
that way. BEA is the living proof that a 
company can focus just on Java and do 
extremely well for itself. 

Mind you, Sun has done some things 
right recently. Take Jini, for example. Sun 
was set to release a major upgrade at 
JavaOne to Jini networking technology 
with the Jini Starter Kit 2.0. It will 
include an improved security model, a 
new implementation of Remote Method 
Invocation (RMI), named Jini Extensible 
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Remote Invocation (JERI), new service 
discovery protocols and a whole lot more. 
What's more important, though, is 
that this radical rehaul is designed for 
two purposes. The first is to make Jini 
work better with XML-based Web ser- 
vices. The second is to turn Jini from its 
stumbling beginning as a wireless, plug- 
and-play management framework for 
mobile devices into more of a business- 
oriented system. While I don't have 
enough details to say exactly where Jini 
is going, it certainly looks to me 
like after JavaOne it will show 
much more promise in enter- 
prise and business program- 
ming than it has before. 

If nothing else, the mobile 
wireless market that Jini was 
targeting is finally growing. In 
fact, it's growing by leaps and 
bounds. 

Two years ago when Nokia President 
Pekka Ala-Pietila told a JavaOne audi- 
ence that Nokia was going to combine 
cell phones and personal digital assis- 
tants, aka smartphones, the reaction 
was, at best, lukewarm. 

Things have heated up since then. Last 
quarter, Ross Sealfon, IDC's research ana- 
lyst for its smart handheld devices pro- 
gram, reported that smartphones are tak- 
ing off, with worldwide first-quarter 2003 
shipments growing by more than 400 per- 
cent to 1.71 million units. That's a lot of 



devices in dire need of programming. Still 
have doubts? As you walk around the 
floor, notice just how many mobile ven- 
dors like Siemens Mobile and Nextel are 
around? They're not there to enjoy San 
Francisco; they're there to do business. 

They know that Java is well-placed to 
make business happen. While C++ is a 
leading contender in the mobile space, 
Java also has a strong presence. Heck, I've 
found developers who use J2ME, Per- 
sonaljava and JavaPhone on Microsoft's 
Smartphone operating system, where Java 
has no official support whatsoever. 

Whether you were at the show or not, 
it's time to give serious thought to devel- 
oping Java applications for the mobile 
market. OK, so Java on desktops never 
took off the way many hoped it would. 
But it's beginning to look to me like 
smartphones are going to be an impor- 
tant and lucrative market, and not just a 
niche market, for Java developers. 

If you were at JavaOne, I hope you 
took a long hard look at possible mobile 
customers and at ISVs who can help you 
win those customers. I also hope you 
spent some time kicking Jini's wheels. It 
may just be a compelling way to coordi- 
nate Web services over the network. I 

Steven }. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 
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MERCURY'S ON THE RISE 



The movement within the software 
industry over the past two years can 
be defined in three words: up the stack. 

Companies that sold point solutions 
thought they needed to expand into 
broader areas by moving up the stack. 
Thus, Java application server vendors 
became development tools purveyors as 
well; integration tools vendors embraced 
Web services as a deployment mecha- 
nism; configuration manage- 
ment vendors saw the need to 
move into business processes 
and project management. 

For some (BEA, Borland), 
the move went well, as revenues 
and market shares increased. 
Others (Allaire, Bluestone, Sil- 
vers tream) simply disappeared. 

One, Mercury Interactive 
Corp., had quietly been expanding from 
its core base of testing and performance 
tools through strategic partnerships with 
vendors in the defect-tracking and busi- 
ness rules management markets. If any- 
one wondered whether Mercury too was 
headed "up the stack," last month's 
acquisition of J2EE diagnostics tool ven- 
dor Performant, coupled with its Optane 
and Business Technology Optimization 
(BTO) initiatives, spoke volumes about 
where Mercury is headed. 

"We're extending from QA to profes- 
sional services, helping companies get 
a handle on their key initiatives," 
explained Jim Hare, Mercury's director 
of technology alliances. "A lot revolves 
around total cost of ownership." 

Mercury seems well-positioned to 
move beyond its traditional area. In two 
years, the company amassed a huge sum 
of cash on hand as revenues have grown 
from US$187.7 million in 1999 to $400.1 
million in 2002. Some $18 million of 
that went to acquire Performant, and, 
according to Meta Group program 
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director Glenn O'Donnell, "it won't be 
their last acquisition." 

Mercury "is one of the great success 
stories in our industry," O'Donnell contin- 
ued. "They've done a great job of extend- 
ing their traditional testing product line, 
and the application performance manage- 
ment piece has been doing very well." 

The company's goal, according to 
Gartner Inc. analyst Theresa Lanowitz, 
is to integrate the testing and 
performance management prod- 
ucts into its larger vision of 
BTO. To that end, Mercury has 
been in overdrive. 

Optane is the first step. There 
are new solutions for application 
delivery, which combine Mer- 
cury's erstwhile LoadRunner, 
■ TestDirector and QuickTest tools 
new ProTune Delivery Services 
acquired from Performant; and for appli- 
cation management, which tie Mercury's 
Topaz to the Performant technology. 
While it appears to be not much more 
than a rebundling and rebranding of 
existing tools, Hare explained that the key 
new feature is what Mercury calls a 
shared technology foundation, which 
provides customers with the ability to use 
the same test scripts and monitors both in 
testing and in production. Also, Hare said 
the Performant trace technology, which 
tracks every event in the system — there- 
by catching problems that sampling and 
aggregation approaches would miss — can 
set Mercury apart by allowing testers to 
catch synchronization issues, deadlock 
conditions and other seemingly randomly 
recurring problems. 

With Performant's technology, Hare 
said users can make their own instrumen- 
tation choices to determine the trade-off 
between deep visibility and performance 
overhead. Also, different roles and views 
of metrics can be displayed in the single 



product. "IT executives, systems guys, 
application support guys all can get the 
views they need from the same product. It 
decreases the time for problem resolu- 
tion — what we call a rapid triage. 'Which 
tier is it in? Who do I call in to solve the 
problem?' It enables an efficient collabo- 
ration between teams, because everyone 
looks at the same metrics and has the 
same view into the application stack." 

This plays right into Mercury's plans 
for BTO. The strategy is to show compa- 
nies the importance of monitoring busi- 
ness requirements throughout the appli- 
cation life cycle. "In a J2EE environment, 
[users] can trace individual business 
processes as they cross the app server and 
break down the time spent in layers and 
components. For example, you could see 
that it took 50 milliseconds to execute a 
purchase checkout. But that turns out to 
be 50 percent of the transaction time. 
This gives you the business context to 
help you prioritize performance work." 

According to O'Donnell, Mercury 
had been more subtle about expanding 
its place in the IT universe, recently 
joining forces with key partners such as 
Telelogic, for requirements manage- 
ment, and Serena, for configuration 
management. There is, however, noth- 
ing subtle about BTO, he said. 

"It's the sexy place to be to demon- 
strate value [of IT] to the business side," 
he said. "There are a lot of similar initia- 
tives, and many vendors are moving 
toward this." In fact, TIBCO and ILOG, 
to name but two, also are staking a claim 
in this growing market. 

"It's purely an economic thing" for 
businesses, O'Donnell said. "The busi- 
ness people are saying, 'We spent a lot of 
money on you guys. What are we getting 
for it?' If the IT organization can't 
defend it, they can't justify a budget. 
That's how it should be." 

David Rubinstein is executive editor of 
SD Times. 



IBM, Oracle Lead Shrinking RDBMS Market 



The 2002 worldwide relational database manage- 
ment system (RDBMS) market declined 7 percent 
compared with 2001, according to a recent Gartner 
Inc. study that looked at new license revenue on 
Linux/Unix, Windows, mainframes and other high- 
end platforms. 

Three large software vendors, IBM, Oracle and 
Microsoft, continue to hold most of the market 
share in three major RDBMS software segments. 
IBM captured the largest market share in the total 
RDBMS segment, while Oracle maintained its lead 
in market share in the total Windows and 
Linux/Unix RDBMS segment. 

The research also showed that sales of the for- 
mer Informix RDBMS products declined by 33 per- 
cent overall, which Gartner believes may reflect 
IBM's plan to encourage Informix customers to 
migrate to DB2. 
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After changes in its executive team, lona Technolo- 
gies Corp. last month cut its staff by 32 percent, 
reducing the number of employees from about 600 
to about 400 worldwide, according to a spokesman. 
The cuts, designed to help restore profitability, come 
as the company reassesses where it has been play- 
ing in the software market and where it wants to be, 
the spokesman said . . . Intalio Inc. has closed a 
US$5 million round of funding to expand its sales and 
marketing programs to promote the company's busi- 
ness process management system. Intalio is on the 
OASIS technical committee that is working to stan- 
dardize the Business Process Execution Language 
. . . Merant Inc. reported a decline in fiscal-year 
2003 revenues from the prior year, but showed a 
return to profitability. For 2003, Merant reported 
revenues of US$122.1 million, down from $124.7 mil- 
lion in 2002. But profits in 2003 rose to $4.2 million, 
up from a loss of $18 million posted a year ago. For 
the fourth quarter of 2003, the company reported 
earnings of $2.3 million, up from $1.4 million in the 
third quarter and a big increase over the loss of $4.9 
million reported in the fourth quarter of 2002 
. . . Computer Associates International Inc. 
reported fourth-quarter 2003 revenues of US$801 
million, up 4 percent from 2002, but net loss for the 
quarter was $106 million, or 18 cents per diluted 
share. This compares with a net loss of $238 million, 
or 41 cents per diluted share, for the same period a 
year ago. For the year, the company reported rev- 
enues of $3.11 billion, an increase over 2002's 
revenues of $2.96 billion. It reported a net loss of 
$267 million for the year, down from a loss of $1.1 bil- 
lion in 2002. Also, CA has announced it is forming 
CA Technology Services, combining its presales 
technical and professional services organizations. I 
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CeBIT America 

New York 

HANNOVER FAIRS USA 
www.cebit-america.com 



June 18-20 



Worldwide June 23-27 

Developers Conference 

San Francisco 

APPLE COMPUTER INC. 

http://developer.apple.com/wwdc 

TheServerSide June 27-29 

Symposium 

Wakefield, Mass. 

THESERVERSIDE.COM 

www.theserverside.com/symposium 

Open Source Convention July 7-11 

Portland, Ore. 

O'REILLY & ASSOCIATES INC. 

http://conferences.oreillynet.com/os2003 

Macworld Expo July 14-18 

New York 

IDG WORLD EXPO 

www.macworldexpo.com 

VSLive July 28-31 

New York 

FAWCETTE TECHNICAL PUBLICATIONS 

www.vslive.com/2003/ny 

For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Does your software give you a better way to monitor and manage 
application development? Ours does. 

Our software goes to great lengths to help you optimize application development projects, so you won't 
have to. AM Fusion" is Computer Associates' comprehensive and flexible application [ffecyde management 
solution. Whether youT projects erne in .NEX JAVA or the mainframe, you con transparently monitor and 
manage all phases of application development, including people, process and tools. And that means you 
iron't fust finish projects on time. You'll deliver them within budget. ca.com/aillfusfOn 
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